There have in the past been some ddos attacks that were most likely by a foreign actor, but they were directed against individual repo's that contained material that the attacker wanted to suppress.

See http://arstechnica.com/security/2015/04/ddos-attacks-that-cr...