标签：#spam

The Month GitHub Public Contributions Exploded To date, GitHub remains the most widely used code storage cloud platform. The amount of data pushed to GitHub every year is tremendous. In 2025 alone, GitGuardian's Public Monitoring platform analyzed more than 2 billion commits. This represents around 5.5M commits per day and an impressive amount of data. However, since July 2026, this number has exploded. In June, the commit rate was stable, at around 8 million commits per day, in line with the increasing trend we had observed over the past months. But starting in mid-July, the commit rate moved to 10 million on the 6th of July, then rose to 18 million on the 25th, up to nearly 40 million on July 31st. This is about 5x the June baseline. Number of commits per day from June to August 5th Upon inspection in our own monitoring, we noticed an unusually large number of commits with similar characteristics: They are created on repositories that use a legitimate-looking username, but a completely random 6-letter lowercase name. They use random e-mail addresses unrelated to the username, hosted on hotmail.com, outlook.com, and icloud.com. The web-flow built-in GitHub user creates them. They contain a long commit message that often contains the whole pushed file: only one per commit. The committed files contain a mix of Chinese characters, domain names, URLs, and AI-generated images. Each repository can contain more than a thousand different files. One of the many similar ad bearing repositories In recent days, the number of those commits has become so high that it represents the majority of observable public events. Querying the GitHub Archive database, at the time of writing, out of the last 1,000 observed events, 728 are linked to those commits. Similarly, this activity is now so dominant that querying GitHub's public events feed yields mostly spam data. $ curl "https://api.github.com/events?per_page=100" | jq .[].repo.name fairchip250/hkrkor rapidhawk0220/nxxrlb bjarstae71