The spam campaign attacking Writefreely instances is out of control. Can you contact the admins you know?
Fediverse (npub1euf…m5gv)
Yesterday I received this message from my friend Elena Brescacin (npub1yzp…twe4):
> Are you the one running the "writefreely blogs" bot, aka writefreely@poliverso.org> ? Because there are tons of English accounts full of links that post nonstop.
And indeed, [that account republishing posts from some Italian instances](https://poliverso.org/profile/writefreely ) had a staggering amount of spam.
This is due to a **[very serious vulnerability that hasn't yet been patched by the developers,](https://github.com/writefreely/writefreely/issues/1649 )** but which has (obviously) started to be exploited on a large scale.
I've notified all the Italian administrators of WriteFreely (npub1p6k…khwm) instances, but I'm having some difficulty contacting the foreign ones.
These are the ones with the most users:
https://write.otter.homes/read
https://infosec.press/read
https://blog.liberta.vip/read
https://write.tedomum.net/read
https://val-vgms.gay/read
https://bolha.blog/read
But there are many others.#
**Is there anyone among you who can try this or at least spread the word?**#
Note: As I mentioned, the vulnerability has been known for a long time and is currently being exploited on a large scale.https://github.com/writefreely/writefreely/issues/1649
macfranc
npub1cw…ku6r8
2026-07-17 08:45:43 UTC
Author Public Key
npub1cw6c950t4mg768sg5yt376jytkhf34n0t8e0526wkr562k6d45tqrku6r8Seen on
wss://relay.momostr.pinkPublished at
2026-07-17 08:45:43 UTCEvent JSON
{
"id": "347c44c9598919f5edf5b00f2167880b8505fb6ab557092eb61a4b69decd9087",
"pubkey": "c3b582d1ebaed1ed1e08a1171f6a445dae98d66f59f2fa2b4eb0e9a55b4dad16",
"created_at": 1784277943,
"kind": 1,
"tags": [
[
"p",
"0eada9f9bbeaad5422fc16ce37fbb87c200bb7f407ffbbfe7bf676079b07b0a9"
],
[
"p",
"2082d48af1fc37ad08d6fce90f210130231a3fb27c58d6601eb7d2fc7e67b087"
],
[
"p",
"cf1248833a90e4041b25746ae990c71dfb04359e54fba9bd7fc54f986611089a"
],
[
"proxy",
"https://poliversity.it/@macfranc/116934439283108578",
"web"
],
[
"proxy",
"https://poliversity.it/users/macfranc/statuses/116934439283108578",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://poliversity.it/users/macfranc/statuses/116934439283108578",
"pink.momostr"
],
[
"-"
]
],
"content": "The spam campaign attacking Writefreely instances is out of control. Can you contact the admins you know?\n\nnostr:npub1eufy3qe6jrjqgxe9w34wnyx8rhasgdv72na6n0tlc48eses3pzdqe7m5gv\n\nYesterday I received this message from my friend nostr:npub1yzpdfzh3lsm66zxkln5s7ggpxq3350aj03vdvcq7klf0cln8kzrs28twe4:\n\n\u003e Are you the one running the \"writefreely blogs\" bot, aka writefreely@poliverso.org\u003e ? Because there are tons of English accounts full of links that post nonstop.\n\nAnd indeed, [that account republishing posts from some Italian instances](https://poliverso.org/profile/writefreely ) had a staggering amount of spam.\n\nThis is due to a **[very serious vulnerability that hasn't yet been patched by the developers,](https://github.com/writefreely/writefreely/issues/1649 )** but which has (obviously) started to be exploited on a large scale.\n\nI've notified all the Italian administrators of nostr:npub1p6k6n7dma2k4gghuzm8r07ac0ssqhdl5qllmhlnm7emq0xc8kz5spukhwm instances, but I'm having some difficulty contacting the foreign ones.\n\nThese are the ones with the most users:\n\nhttps://write.otter.homes/read\nhttps://infosec.press/read\nhttps://blog.liberta.vip/read\nhttps://write.tedomum.net/read\nhttps://val-vgms.gay/read\nhttps://bolha.blog/read\n\nBut there are many others.# \n\n\n\n**Is there anyone among you who can try this or at least spread the word?**# \n\nNote: As I mentioned, the vulnerability has been known for a long time and is currently being exploited on a large scale.https://github.com/writefreely/writefreely/issues/1649",
"sig": "d69b90d120949ccd39ce1a53e5025df5b4153eb14b794b713672848d6045e66869594a01af15c8236f076a859ae2afe9e7ed6e65aae72d3c1d8479ec2366d880"
}