https://pbs.twimg.com/media/HItbXhvW4AAMD8W?format=jpg&name=...

All of their repos have been copied and are up for sale. Attackers are TeamPCP, the creators of the Shai-Hulud malware.

If that’s true and they do intend on shredding their copy on sale, what stops GitHub from buying it back themselves? (through a proxy, obv)

Nothing, this is one of the most common types of ransomware going on right now, exfiltration only extortion.

I probably wouldn't believe that "shredding". Also there will be legal consequences I think?