You misunderstand (which is understandable given the poor writing of the article) - this wasn’t a hack of software on Github - the leakers published the info ON Github.
Maybe I misunderstand it. I was under the impression that GitHub was used both to announce what happened, and before that Github was used as the instrument of spreading the China hacking malware.