If the code in any way includes private API keys, or circumvents protections on another entity's private API keys, then this is intellectual theft and punishable by the law. I'm willing to bet that without those private keys, the repo is worthless.
it doesn't contain private keys, arguably it contains irresponsible disclosures of various ways some large API users can predictably get their keys hijacked