Simple: Not his repo ! He just made the malware wallet. And can be a generic one since we are talking about ERC20. An EVIL MEW of sorts...