For the most part, compromised creds and compromised keys are leading cause and it is good to see Github and Gitlab enforcing 2FA for open source repos/accounts.