How do you know they "wanted" access to look for Amazon keys? Do you know it wasn't from a blanket scan of github? Sure, there are only 13 projects on https:/

How do you know they "wanted" access to look for Amazon keys? Do you know it wasn't from a blanket scan of github? Sure, there are only 13 projects on https://uber.github.io/ https://uber.github.io/, but there are 169 on https://github.com/uber https://github.com/uber, and it only takes a short while to scan for access keys. There are plenty of open tools that will scan github for keys. This may not have been targeted at Uber but a net for all of github with Uber being just one company that was hit up for cash. Unless you're saying that you know the motivations of the attackers.