The attacker is also threatening to make these private repos public, or misuse their access to the repos in other ways (likely additional types of breaches).