Back when the first half of this stuff was leaked, Snowden suggested that this was likely stuff left on an external machine that the NSA was using for staging and failed to clean up. I'd link the tweet but can't find it at the moment. Given the age of most of this stuff that seemed plausible.
Now that we've seen more than just tools and exploits leaked (powerpoints, other documents), that doesn't seem plausible anymore.