Tripwire Pilot publishes a public list of 542 GitHub bounty-spam accounts
damnGruz · x · 2026-11-10
Tripwire Pilot is a public, maintainer-reviewed list of GitHub spam accounts—542 so far—that you can plug into your own Actions and bots, or enable as a first-party rule in Tripwire.
Most listed accounts mass-submit PRs in "simulated bounty studies" to farm bounties: one filed 30 PRs, another posted 30 identical bounty claims across issues within a minute. Anyone can contribute to the list, aiming to clean up GitHub's bounty-farming ecosystem.
More from coding & agent
- Dev discovers Claude Code created a fake virtual display on his Mac to build apps 24/7 — vincent_koc · 2026-11-10
- Design engineer suspects AI agents could easily replace his job with good data — CreamPiBaroness · 2026-11-10
- Agents build Lean models of every CPython 3.15.2 function, validated on 50,000+ generated inputs — ChrSzegedy · 2026-11-10
- 10 open-source repos that review your code with AI, from Alibaba to Anthropic — victor_explore · 2026-11-10
- The dialectics of AI coding: LLMs can't write prod code unsupervised — neither can humans — ShenRaphael · 2026-11-10
- SteerCamp's multi-agent crew holds daily standups, reporting progress and blockers like employees — pramodk73 · 2026-11-10