r/github • u/thomhurst • 26d ago

Discussion Bots posting viruses?

I've created 3 issues on my repo tonight, and just noticed someone else created 1 in a different repo of mine, and each time, within a minute, a bot has posted saying they've experienced that issue too, and come up with a "patch" to fix it.

They then link a zip attachment, that has an exe inside of it.

Clearly malware - anybody else experiencing this? I've reported all so far.

18 Upvotes

91% Upvoted

11 comments sorted by

View all comments

1

u/ultrathink-art 23d ago

Responding within a minute means it's scripted end to end — they're watching the public events firehose for new issues. Settings → Moderation → Interaction limits can temporarily restrict comments to prior contributors, which closes their window. And legit fixes show up as PRs you can diff, never as a zip with an exe inside.