Developers sometimes upload entire project folders to GitHub, forgetting they included an .htaccess or a config/passwords.txt file. Automated bots scrape GitHub every second.
(advanced search) to find sensitive files that have been accidentally left public on web servers. What the Search Query Means "Index of"