The intent behind the original licenses doesn't matter. One of the repos[0] had two licenses the Apache License 2.0 and the LGPL v2.1. If that means it is open source then it is fair play as I don't have the time nor the expertise to go through both licenses. You know who probably didn't either, Hacking Team. They are professional hackers and even if they straight up stole the code the main way they would be caught is if their code leaked. In that scenario, an angry dev would be/currently is the least of their problems.
If it is on Github and it is worth using, it will get used. Good and bad people use open source software, it is a just a tool, totally neutral.
The intent does matter when answering the original question of why this is surprising. It's because the original author released the code under a license that gave freedoms they didn't intend. It's the original developer suddenly being surprised, and they realize the mistake they made in choosing the license they used.
If it is on Github and it is worth using, it will get used. Good and bad people use open source software, it is a just a tool, totally neutral.
[0]https://github.com/crmulliner/adbi/search?p=2&q=license&type...