They scraped private repos.