There is an active searching for these credential leaks in the various repositoriues to then be used so this is an exploit. It shows intent, an organised way of

There is an active searching for these credential leaks in the various repositoriues to then be used so this is an exploit. It shows intent, an organised way of searching for vulenrabilities and accomplishment of the task. It's the equivalent of stalking the security guard and evasdroping on his public communications in the hope that he slips us and when drunken enough will reveal the passcode to the entrance door. Public repositories make it more easy to "stalk" in that sense, but yet it's a active search for a vulnerability, that of not not following security recomandations. If someone intends to rob a bank doens't matter how they have obtained the vault key, when the bank was robbed.