Their repositories are really something, and the commits seem to only happen in bursts, I expected them to do a few commits every day, instead it's like 10 days a year with 1700+ commits total.
But I wouldn't assume they are conventionally malicious, more like a ~~paperclip~~ storage optimiser
Depends on how much more you pay