I was able to enumerate them in a few ways: Public repositories, DNS leaks, and people searching the service for onions.