Tripwire Pilot publishes a public list of 542 GitHub bounty-spam accounts

damnGruz · x · 2026-11-10

Tripwire Pilot is a public, maintainer-reviewed list of GitHub spam accounts—542 so far—that you can plug into your own Actions and bots, or enable as a first-party rule in Tripwire.

Most listed accounts mass-submit PRs in "simulated bounty studies" to farm bounties: one filed 30 PRs, another posted 30 identical bounty claims across issues within a minute. Anyone can contribute to the list, aiming to clean up GitHub's bounty-farming ecosystem.

Original post →

More from coding & agent

coding & agent channel →