Unclear, but I think it might have been something like, find out (via reverse IP lookups) which big companies depend on which gems, and then use that information to market consulting services to those companies.
I guess something sinister is also an option...
well,yes, already that description is sinister; I might be getting too old.
That description is not sinister. Its just marketing. An example of sinister would be to sell those logs to someone who could instigate a supply chain attack targeting some of those companies.
Try to identify companies making heavy use of $thing and use that as leads.