HN 提问：GitHub 的推送农场（push-farm）僵尸网络是用来做什么的？
3 分•作者: ghspamwatch•大约 2 个月前
GH Archive 每小时记录约 16 万个公开的 GitHub 事件，目前约有 64% 的推送是垃圾信息。成千上万的自动创建账户（用户名格式为单词+数字，如 smithhoward5868，仓库名称也杂乱无章）每小时向新创建的仓库推送数百次，全天候不间断。有一个仓库 LiamBruhin/SillyStuff，在单小时内由一个用户推送了 690 次，并且已连续持续了 13 多个小时。
我构建了一个实时雷达，用于检测这些“养殖场”以进行诚实排名，并且我一直在追踪它们长达 34 小时。实时链接：https://github-pulse.surge.sh — 包含图表和“养殖场”账本的完整报告：https://github-pulse.surge.sh/report.html — 开源的单一脚本：https://github.com/Atheistam/github-pulse
但我真的不知道他们这样做的目的是什么。没有星标、没有分叉、没有问题、没有拉取请求、没有有意义的 README — 只有对新创建的杂乱仓库进行无休止的推送。是为了 SEO？GitHub Actions 转售？训练数据投毒？有人见过这种模式吗，或者有人知道最终目的是什么吗？
查看原文
Every hour GH Archive records ~160K public GitHub events, and right now ~64% of the pushes are spam. Thousands of auto-created accounts (word+digits usernames like smithhoward5868, gibberish repo names) push hundreds of times an hour to fresh repos, 24/7. One repo, LiamBruhin/SillyStuff, pushed 690 times in a single hour from ONE actor, and has kept that up for 13+ hours straight.<p>I built a live radar that had to detect these farms to rank honestly, and I've been tracking them for 34 hours. Live: https://github-pulse.surge.sh — full writeup with charts and the farm ledger: https://github-pulse.surge.sh/report.html — open-source single script: https://github.com/Atheistam/github-pulse<p>But I genuinely don't know what they're FOR. No stars, no forks, no issues, no PRs, no meaningful README — just endless pushes to fresh gibberish repos. SEO? GitHub Actions reselling? Training-data poisoning? Has anyone seen this pattern before, or does anyone know what the endgame is?