I have seen your article. This bit caught my attention:
> All files are dated back to 24 February 2022.
If a coincidence, pretty interesting.
> All files are dated back to 24 February 2022.
If a coincidence, pretty interesting.
Unlikely that was the day of download, it's common practice to mask last-modified/last-accessed/created-at timestamps in dumps, by setting it to some significant date or just initial unix timestamp.
So it makes sense they stopped committing to other repos somewhat around that date.
I don't have any inside knowledge now, but my guess would be that the leak is from 'on-prem' github.