No "credentials" are being "harvested" here. It's all worthless data, save for the statistics.

Do most installations create a git user account with login permissions?

Having a root password of "toor" is very clever. Nobody will figure that one out.