Why were the Issue and Pull Request interfaces hacked #21802
-
|
I'm sorry, this is my first time participating in the discussion of this project, even though it's not related to the code features of the project. But I want to say: 
> An Issue Looks Like That.
It's crazy! I'm not sure what exactly happened, but I learned from Tencent QQ channel that the warehouse had this issue (being hacked) In just a short period of time, we have accumulated hundreds or thousands of such advertising content.
They (intruders) publish such content in Issues and PRs and also use Chinese computer professional keywords to confuse possible automated reviews. They have already infiltrated multiple repositories by introducing external Github repository links, inserting images, and other methods. To avoid the current situation from happening again, I personally suggest temporarily closing the channels for publishing issues and PRs |
Beta Was this translation helpful? Give feedback.
Replies: 8 comments 3 replies
-
|
I found a PR that said this too: |
Beta Was this translation helpful? Give feedback.
-
|
Absly crazy |
Beta Was this translation helpful? Give feedback.
-
|
It's crazy. 不要害的我们上不了github |
Beta Was this translation helpful? Give feedback.
-
|
GitHub 只在這種時候可以順暢不當機 |
Beta Was this translation helpful? Give feedback.
-
|
=== 受害仓库 + 首次被刷时间 === 总计受害仓库：71 个 分析：目前部分仓库本身存在虚假情况，推测为最开始在攻击者自己仓库攻击，随后进入公共仓库攻击，目前找到最早为2026-03-27T08:52:53Z开始 |
Beta Was this translation helpful? Give feedback.
-
|
Github已处理举报，以下是Github官方回复邮件原文 GitHub (GitHub Support) Mar 29, 2026, 6:18 PM UTC Hello, Our review of the account named in your report has concluded. We have determined that one or more violations of GitHub’s Terms of Service have occurred and have taken appropriate action in response. Please note that our response to abuse on GitHub varies depending on the exact circumstances of each case, as noted in our Community Guidelines: What happens if someone violates GitHub's Policies Additional information on dealing with offensive users or content can be found here: What if something or someone offends you? Thank you for helping create a safe and welcoming environment for software developers. Regards, 半岛的蒟蒻bddjr Mar 29, 2026, 4:02 PM UTC Report Abuse: rdean-8388k (user) Reason Comments |
Beta Was this translation helpful? Give feedback.
-
|
GitHub is doing great job to prevent spams, they have massive leftovers. Why I can still found spam that exists in 2023?
|
Beta Was this translation helpful? Give feedback.
-
|
The problem looks like was solved |
Beta Was this translation helpful? Give feedback.
-
|
I think Microsoft/GitHub employees should aware this |
Beta Was this translation helpful? Give feedback.
-
|
I have raised up this issue at GitHub Community, hope everyone can thumb up or +1 the issue. |
Beta Was this translation helpful? Give feedback.
-
good job! |
Beta Was this translation helpful? Give feedback.
Github已处理举报，以下是Github官方回复邮件原文
GitHub (GitHub Support)
Mar 29, 2026, 6:18 PM UTC
Hello,
Our review of the account named in your report has concluded. We have determined that one or more violations of GitHub’s Terms of Service have occurred and have taken appropriate action in response.
Please note that our response to abuse on GitHub varies depending on the exact circumstances of each case, as noted in our Community Guidelines:
What happens if someone violates GitHub's Policies
Additional information on dealing with offensive users or content can be found here:
What if something or someone offends you?
Thank you for helping create a safe and welcoming environment for software developers.
R…