Noticing LLM spam on GitHub repos: any time I open an issue on my cryptography compiler project, some rando whose profile lists no relation to crypto or compilers files a PR with an LLM-generated implementation.
What to do? My security brain feels like these are scammers trying to build up legit-looking profiles for the purpose of eventually doing supply chain attacks.
Jeremy Kun
npub1pe…4h36q
2025-11-15 17:14:53 UTC
Author Public Key
npub1pe67uceztjyefem3xmphw05e65200df0hrrv60464v6w8xjtgvgqp4h36qSeen on
wss://relay.ditto.pubPublished at
2025-11-15 17:14:53 UTCEvent JSON
{
"id": "369b4a196d9e731e74daa80007358339af5004ebee429edc8df864994b8bced5",
"pubkey": "0e75ee63225c8994e77136c3773e99d514f7b52fb8c6cd3ebaab34e39a4b4310",
"created_at": 1763226893,
"kind": 1,
"tags": [
[
"proxy",
"https://mathstodon.xyz/users/j2kun/statuses/115554837667186386",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub/"
]
],
"content": "Noticing LLM spam on GitHub repos: any time I open an issue on my cryptography compiler project, some rando whose profile lists no relation to crypto or compilers files a PR with an LLM-generated implementation.\n\nWhat to do? My security brain feels like these are scammers trying to build up legit-looking profiles for the purpose of eventually doing supply chain attacks.",
"sig": "8f5e99683a49f7afeebb316b4715c27a7806bcc83e89f4b77ed9f146523dcf338d2c67fd9d98048adc8571f73fd0dc5b4efbc5d8041ff85c61f928a2c3e10613"
}