This is actually the most plausible explanation I have seen so far: they just finished implementing this new injection feature and they needed something to test

This is actually the most plausible explanation I have seen so far: they just finished implementing this new injection feature and they needed something to test it on. For lack of a better target, they chose those two github projects. Everybody's talking about how this is a targeted attack against GH, but I'm starting to think you might just have hit the nail on the head...