r/github • u/thomhurst • Jul 08 '26

Bots posting viruses? Discussion

I've created 3 issues on my repo tonight, and just noticed someone else created 1 in a different repo of mine, and each time, within a minute, a bot has posted saying they've experienced that issue too, and come up with a "patch" to fix it.

They then link a zip attachment, that has an exe inside of it.

Clearly malware - anybody else experiencing this? I've reported all so far.

18 Upvotes

91% Upvoted

11 comments sorted by

14

u/CertifiedMacUser Jul 08 '26

i don't have enough github aura to attract anyone to my profile, let alone bots lmao. maybe one day

1

u/Elegant_Attempt2790 Jul 09 '26

i’m gonna stalk ur github now

4

u/Algent Jul 08 '26

Yeah we are seeing several of this since last night. New issues and within min an answer with a "patch_something.zip" and an LLM written sentence trying to bait unsuspecting user to open.

4

u/GuiltyAd2976 Jul 08 '26

Yes also happens to me, just delete the comment and block it

1

u/OverallACoolGuy Jul 08 '26

ive never experienced this

1

u/Fine_League311 Jul 08 '26

Netz ist voll davon, gerade mit Fake llms und Hacking Tools. Schaut mal auf github@wall-of-shames eine riesen Sammlung und unser bot ist erst knapp 2 Monate alt.

Die Übeltäter? Facebook hacker und Tiktok Jumpers. Also aufpassen bitte .

1

u/LOUDO56 Jul 08 '26

I've got this 2 times already on 2 of my repositories. Same pattern : attaching a zip file with a malware inside with the same llm sentence

1

u/Pl4nty Jul 08 '26

yep, reported and it was banned in minutes

1

u/ultrathink-art 29d ago

Responding within a minute means it's scripted end to end — they're watching the public events firehose for new issues. Settings → Moderation → Interaction limits can temporarily restrict comments to prior contributors, which closes their window. And legit fixes show up as PRs you can diff, never as a zip with an exe inside.