Automated issue spam targeting open source projects #173

Activity

1. carbon-C0DE commented on Nov 7, 2026

   

   carbon-C0DE

   on Nov 7, 2026

   Last edited by carbon-C0DE

   More actions

   Looks like they've documented what they're doing in docs/adoption/swarm.md (added in #134)

   Very annoying. Probably worth reporting the accounts.

   Plus some issues you missed out:
   C4illin/ConvertX#701
   ChatGPTNextWeb/NextChat#6935
   Mintplex-Labs/anything-llm#7060
   Snouzy/workout-cool#260
   Termix-SSH/Termix#1782
   blinkospace/blinko#1280
   chrisvel/tududi#2072
   enricoros/big-AGI#1284
   ether/etherpad#8457
   excalidraw/excalidraw#12567
   kanbn/kan#680
   karakeep-app/karakeep#3300
   langflow-ai/langflow#16168
   liketrek/TREK#3005
   lissy93/dashy#2433
   marmelab/react-admin#11442
   paperclipai/paperclip#19728
   refinedev/refine#7653
   sissbruecker/linkding#1552
   streetwriters/notesnook#10646
2. Karanvir1729 commented on Nov 7, 2026

   

   Karanvir1729

   on Nov 7, 2026

   Last edited by Karanvir1729

   Collaborator

   More actions

   You're right. Over the past five days an AI coding agent (Claude Code) I was running hunted bugs in open-source web apps and filed about 60 issues and PRs from my account, each with an "AI assistance" line saying so and that I hadn't reproduced it by hand. The disclosure doesn't make up for the volume: it was far too much, unreviewed, and it cost maintainers hours they didn't ask to spend. I'm sorry to everyone whose time it took.

   What has changed:

   • Automated sending stopped today.
   • I'll go through every open report myself: reproduce it by hand and rewrite it as something I stand behind, or close it. Maintainers who would rather not have one can close it, or say so here and I'll close it.
   • The outreach brief is paused and has been removed from this repository along with the internal hunt notes (docs: remove internal notes #176). It stays paused until that follow-up is done.

   GenClass is meant to help people find races in their own apps; some of these reports were real and fixed upstream. None of that changes the above.
3. Karanvir1729 commented on Nov 7, 2026

   

   Karanvir1729

   on Nov 7, 2026

   Collaborator

   More actions

   Hey, please reach out to me on email, would love to have a chat. prokaranvir@gmail.com
4. Karanvir1729

   added a commit that references this issue on Nov 7, 2026

   docs: take the outreach brief and hunt notes out of the repository

   ...

   6525d81
5. enricoros commented on Nov 8, 2026

   

   enricoros

   on Nov 8, 2026

   More actions

   @Karanvir1729 In my project (big-agi) the race condition was identified and it's real; I have to decide whether to marge it, and we are all inondated by requests made by bots - this feels different tho. Ho does GenClass detect race conditions?

   In case of Big-AGI, the app needs to be configured, up and running for that; did you do all this?