[MrDarcy]

3800 is low for an org like GitHub. Glad it’s highly likely not all their repos are compromised.

[organsnyder]

Given the attack vector, it's possible that the impacted repos were ones that see more activity.