Given the attack vector, it's possible that the impacted repos were ones that see more activity.