• mecen@lemmy.ca
    link
    fedilink
    arrow-up
    24
    ·
    1 day ago

    Well these accounts are probably making first commit so it can also be easily found

    • bobo@lemmy.ml
      link
      fedilink
      arrow-up
      34
      ·
      1 day ago

      Alternatively, the first wave of malware stole the accounts of actual contributors. The same method was used in npm afaik.