Best case scenario they’ll try to monetize the site. Worse case it’s a malware distribution play (can eventually change legit repo link to malicious repo)