frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Ask HN:Why do websites today refuse to work on EDGE/2G?

2•DenisDolya•2h ago•1 comments

Ask HN: In your experience, what are sound conventions for e-ink UI development?

211•BoxOfRain•5d ago•72 comments

Ask HN: Responsible/trustable background check companies?

4•levinb•3h ago•0 comments

Ask HN: What do you think of this novel slider puzzle? [video, full rules, beta]

2•amichail•4h ago•2 comments

Ask HN: How's Everyone Feeling Today?

7•arm32•4h ago•7 comments

Remind HN: Perseid meteor shower peaks tonight

7•cjbarber•4h ago•0 comments

DeepSeek-V4-Pro-0813

5•uneven9434•4h ago•0 comments

Ask HN: What are you working on? (August 2026)

315•david927•3d ago•1153 comments

Ask HN: GitHub project that showed all edits (somewhat proving human authorship)

3•4d66ba06•8h ago•1 comments

Bitbucket CLI

3•scr2em•8h ago•0 comments

Ed Zitron on CNBC Squawk Box Talking Nvidia, Unprofitable AI Labs

7•johnbarron•6h ago•0 comments

Ask HN: What are GitHub's push-farm botnets for?

4•ghspamwatch•10h ago•1 comments

Ask HN: Could DNA be represented as "an embedding" in an AI model?

3•greenmoonx•17h ago•1 comments

SETI@Home was the coolest thing

27•b112•2d ago•7 comments

How do you keep PM tools in sync with what happens in WhatsApp/Slack?

2•Harish_0089•7h ago•0 comments

Ask HN: How did you teach analog electronics to your kids?

7•felooboolooomba•1d ago•9 comments

You've reached the end!

Open in hackernews

Ask HN: What are GitHub's push-farm botnets for?

4•ghspamwatch•10h ago
Every hour GH Archive records ~160K public GitHub events, and right now ~64% of the pushes are spam. Thousands of auto-created accounts (word+digits usernames like smithhoward5868, gibberish repo names) push hundreds of times an hour to fresh repos, 24/7. One repo, LiamBruhin/SillyStuff, pushed 690 times in a single hour from ONE actor, and has kept that up for 13+ hours straight.

I built a live radar that had to detect these farms to rank honestly, and I've been tracking them for 34 hours. Live: https://github-pulse.surge.sh — full writeup with charts and the farm ledger: https://github-pulse.surge.sh/report.html — open-source single script: https://github.com/Atheistam/github-pulse

But I genuinely don't know what they're FOR. No stars, no forks, no issues, no PRs, no meaningful README — just endless pushes to fresh gibberish repos. SEO? GitHub Actions reselling? Training-data poisoning? Has anyone seen this pattern before, or does anyone know what the endgame is?

Comments

mtxeat•35m ago
You spent 34 hours tracking this and I still don't know what you're hoping to find, who cares? Probably just some AI dumping garbage code, or someone doing SEO (though that seems unlikely). Anyway, are you bored?