I do notice that when I post a new repo there are immediately a number of clones and I've been told they are bots looking for keys accidentally left in the code.