3800 is low for an org like GitHub. Glad it’s highly likely not all their repos are compromised.

Given the attack vector, it's possible that the impacted repos were ones that see more activity.