Skip to content

WSL's issues has been attacked for Chinese betting platforms#20669

Open
Ne0W0r1d wants to merge 1 commit intomicrosoft:masterfrom
Ne0W0r1d:master
Open

WSL's issues has been attacked for Chinese betting platforms#20669
Ne0W0r1d wants to merge 1 commit intomicrosoft:masterfrom
Ne0W0r1d:master

Conversation

@Ne0W0r1d
Copy link
Copy Markdown

@Ne0W0r1d Ne0W0r1d commented Mar 29, 2026

WSL's issues has been attacked for Chinese betting platforms

Plz disable issues or deleted these issues

WSL 的议题系统被国内的菠菜平台攻击,请考虑禁用 issues 或者直接删除这些 issues

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
@Ne0W0r1d Ne0W0r1d requested a review from a team as a code owner March 29, 2026 07:39
@Ne0W0r1d
Copy link
Copy Markdown
Author

Ne0W0r1d commented Mar 29, 2026

It will contamination of LLM‘s correct.

I think MS side need to do something.

这会污染 LLM 的准确度,我觉得微软应该做点啥

@Ne0W0r1d
Copy link
Copy Markdown
Author

Nah, Issues system cannot use in these moment, I have to use PR / Merge Request.

议题系统这时候不太好提这个问题,所以不得不使用 PR/合并请求功能

@SynMagik
Copy link
Copy Markdown

SynMagik commented Mar 29, 2026

Does this have anything to do with github side?
Where did they get this much new account? All batch registered in January.

@SynMagik
Copy link
Copy Markdown

image

These are all the repositories being attacked I think.

@Ne0W0r1d
Copy link
Copy Markdown
Author

Does this have anything to do with github side? Where did they get this much new account? All batch registered in January.

Idk why Github's Anti-spam didn't do something to limit these account, GitHub is partly responsible for this issue.

@north82
Copy link
Copy Markdown

north82 commented Mar 29, 2026

These are all the repositories being attacked I think.

Yes, you’re right. I randomly checked 10 users, and they are all attacking these repo.

@zlicdt
Copy link
Copy Markdown

zlicdt commented Mar 29, 2026

Seems like those caused a lot of actions running,
and these account create empty repos, raise issues with each other

@SynMagik
Copy link
Copy Markdown

Seems like those caused a lot of actions running, and these account create empty repos, raise issues with each other

I thought github has a mechanism to cope with these malicious accounts.

@Ne0W0r1d
Copy link
Copy Markdown
Author

These are all the repositories being attacked I think.

https://github.com/home-assistant/frontend/issues

such as HA, I think many famous repos are attacked in these moment.

But Idk why Github anti spam system is not working on it

@SynMagik
Copy link
Copy Markdown

Seems like the attack has stopped.

Newest issue is posted 13 mins ago by the time of writing.

@zlicdt
Copy link
Copy Markdown

zlicdt commented Mar 29, 2026

Difficult to recognize these account, does github have spam checks for Chinese contents?
I think they can't be recognize by IP because of VPN

@Ne0W0r1d
Copy link
Copy Markdown
Author

Ne0W0r1d commented Mar 29, 2026

Oh,Fk these accounts are attacking again

@SynMagik
Copy link
Copy Markdown

Round 2 has started.

@xrlzu
Copy link
Copy Markdown

xrlzu commented Mar 29, 2026

Holy, the attack is on again😰

@Ne0W0r1d
Copy link
Copy Markdown
Author

I think they just wanna contamination of LLM‘s correct.

@SynMagik
Copy link
Copy Markdown

I think they just wanna contamination of LLM‘s correct.

No matter what their aim is, the anti-spam mechanism of github is clearly not working.

Also I believe that the contamination of the data correctness of LLM is not their primary goal.

@Nanaloveyuki
Copy link
Copy Markdown

I think its like Generative Engine Optimization(GEO)
我觉得这像是GEO

who know how they sign up github account(crazy

@xrlzu
Copy link
Copy Markdown

xrlzu commented Mar 29, 2026

They opened more than 10k issues in two hours, why MS still doesn't do anything

@Nanaloveyuki
Copy link
Copy Markdown

这些账号很难识别,GitHub 会对中文内容进行垃圾邮件检查吗?我觉得因为 VPN 的关系,IP 无法识别它们

确实很难识别, 大部分vpn用的机房ip, 但是有相当庞大的自动化处理也用的机房ip, github没办法一刀切

@imyimang
Copy link
Copy Markdown

thats insane, everytime i press F5 there are 20 more spam issues
why they even do this

@JouderMin
Copy link
Copy Markdown

They opened more than 10k issues in two hours, why MS still doesn't do anything

They may be haiving a nice weekend

@Nanaloveyuki
Copy link
Copy Markdown

他们在两个小时内开了超过一万期,微软为什么还不做任何事

他们可能会度过一个愉快的周末

还在睡觉呢也说不定

@SleepingCatXD
Copy link
Copy Markdown

他们在两个小时内开了超过一万期,微软为什么还不做任何事

他们可能会度过一个愉快的周末

还在睡觉呢也说不定

睡死了喵?

@Nanaloveyuki
Copy link
Copy Markdown

我感觉这个事件要载入史册了说是, 未来会怎么说: WSL等多个Github仓库被集体GEO入侵, 事件持续了xx小时(甚至xx天)才得到解决, 间接推动了Github的xx功能完善什么的

@QWXL
Copy link
Copy Markdown

QWXL commented Mar 29, 2026

见证历史了也是

@JiaHeWG
Copy link
Copy Markdown

JiaHeWG commented Mar 29, 2026

我感觉这个事件要载入史册了说是, 未来会怎么说: WSL等多个Github仓库被集体GEO入侵, 事件持续了xx小时(甚至xx天)才得到解决, 间接推动了Github的xx功能完善什么的

什么时候上网络安全教材案例

@54145a
Copy link
Copy Markdown

54145a commented Mar 29, 2026

见证历史

@JiaHeWG
Copy link
Copy Markdown

JiaHeWG commented Mar 29, 2026

其实我们发这些 comments 的时候四个 Reviewer 都能看到 Mailing list 的

邮箱爆炸了还睡不醒是吧(

@QWXL
Copy link
Copy Markdown

QWXL commented Mar 29, 2026

其实我们发这些 comments 的时候四个 Reviewer 都能看到 Mailing list 的

邮箱爆炸了还睡不醒是吧(

免打扰了估计

@Tobby-000
Copy link
Copy Markdown

我也算是见证历史了

@FlyingPig278
Copy link
Copy Markdown

已经 16000+ issues了

already 16000+ issues

@Nanaloveyuki
Copy link
Copy Markdown

已经 16000+ issues了

already 16000+ issues

速度变慢了, 也有可能是并发的问题, 之前十分钟2k

@QWXL
Copy link
Copy Markdown

QWXL commented Mar 29, 2026

10分钟1k issues啊

@MinecraftYJQ
Copy link
Copy Markdown

Github也许可以搞一个提交issue需要过人机验证的

@Dainsleif233
Copy link
Copy Markdown

Github也许可以搞一个提交issue需要过人机验证的

但是走api没办法

@sunfkny
Copy link
Copy Markdown

sunfkny commented Mar 29, 2026

100k issues
image
https://github.com/search?q=%22%E3%80%90%E6%89%A3%3A+63923%E3%80%91%22&type=issues&s=created&o=asc

@QWXL
Copy link
Copy Markdown

QWXL commented Mar 29, 2026

已经成为github open issue最多的仓库了吧()

@Nanaloveyuki
Copy link
Copy Markdown

Nanaloveyuki commented Mar 29, 2026

Github也许可以搞一个提交issue需要过人机验证的

很无解, 要人机验证的话一些workflow类程序用不了, 设定账户权重分级的话(类似VRChat的身份机制)又很容易养号绕过去, 并且如何界定权重实现也是个问题, 同样会引起开源社区不满

English Very difficult to solve. If human-machine verification is required, some workflow programs cannot be used. If account weight grading is set (similar to VRChat's identity mechanism), it is easy to bypass account maintenance. Moreover, how to define weight implementation is also a problem, which can also cause dissatisfaction in the open source community

@brill594
Copy link
Copy Markdown

By usimg the search engine you may find more info about the platform and related QQ account.

@north82
Copy link
Copy Markdown

north82 commented Mar 29, 2026 via email

@AnemoFlower
Copy link
Copy Markdown

2026-03-29T07:00:00-04:00 MS-Dev: yawnnnn What a nice Sunday! ☀️ MS-Dev: gurrrr Donut... or hamburger? 🤤 Let me check the messages first... (Unlock the phone...) 📧99+ MS-Dev: WHAT THE F*** 💩

image

Let me have a taste of this feeling 😋

@magic-cucumber
Copy link
Copy Markdown

@conglinyizhi @QiuShui1012

为什么点踩喵,issue不是中国话是什么喵

@etherfun
Copy link
Copy Markdown

已经成为github open issue最多的仓库了吧()

目前应该是这个已经34K了 而且好像是他们的测试仓库

It should be this one that's already at 34K, and it seems to be their test repo.

@MinecraftYJQ
Copy link
Copy Markdown

2026-03-29T07:00:00-04:00 MS-Dev: yawnnnn What a nice Sunday! ☀️ MS-Dev: gurrrr Donut... or hamburger? 🤤 Let me check the messages first... (Unlock the phone...) 📧99+ MS-Dev: WHAT THE F*** 💩

image

Let me have a taste of this feeling 😋

捉😋😋

@Nanaloveyuki
Copy link
Copy Markdown

2026-03-29T07:00:00-04:00 MS-Dev: yawnnnn What a nice Sunday! ☀️ MS-Dev: gurrrr Donut... or hamburger? 🤤 Let me check the messages first... (Unlock the phone...) 📧99+ MS-Dev: WHAT THE F*** 💩

Let me have a taste of this feeling 😋

Make your emails feel bombarded

@QWXL
Copy link
Copy Markdown

QWXL commented Mar 29, 2026

已经成为github open issue最多的仓库了吧()

目前应该是这个已经34K了 而且好像是他们的测试仓库

It should be this one that's already at 34K, and it seems to be their test repo.

吓哭

@GLDYM
Copy link
Copy Markdown

GLDYM commented Mar 29, 2026

由于 elin4231-m/cro 在数小时前有类似的非攻击性刷 issue 操作,严重怀疑 elin4231-m 与该次攻击有关。

@AnemoFlower
Copy link
Copy Markdown

2026-03-29T07:00:00-04:00 MS-Dev: yawnnnn What a nice Sunday! ☀️ MS-Dev: gurrrr Donut... or hamburger? 🤤 Let me check the messages first... (Unlock the phone...) 📧99+ MS-Dev: WHAT THE F*** 💩

Let me have a taste of this feeling 😋
image

STOP😭 How do I turn this off?? 😭😭😭😭

@MinecraftYJQ
Copy link
Copy Markdown

由于 elin4231-m/cro 在数小时前有类似的非攻击性刷 issue 操作,严重怀疑 elin4231-m 与该次攻击有关。

有没有可能那个就是主仓库,(或者说用来测试的?

@xingwangzhe
Copy link
Copy Markdown

This spam attack is severely damaging the reputation of legitimate contributors from China on GitHub, as these bad actors are undermining the credibility of genuine developers and may lead to stricter restrictions for users in the region, which ultimately hurts the entire open source community; such behavior is shameful and deserves strong condemnation, and I hope GitHub can strengthen anti-spam measures while ensuring legitimate users aren't unfairly affected.


这次垃圾信息攻击正在严重损害GitHub上来自中国的合法贡献者的声誉,这些恶意行为者正在破坏真正开发者的信誉,并可能导致对该地区用户实施更严格的限制,这最终伤害了整个开源社区;这种行为是可耻的,应该受到强烈谴责,同时我希望GitHub能够加强反垃圾信息措施,同时确保合法用户不会受到不公正的影响。

@Nanaloveyuki
Copy link
Copy Markdown

image 这从昨天就开始了
English It started yesterday

@magic-cucumber
Copy link
Copy Markdown

This spam attack is severely damaging the reputation of legitimate contributors from China on GitHub, as these bad actors are undermining the credibility of genuine developers and may lead to stricter restrictions for users in the region, which ultimately hurts the entire open source community; such behavior is shameful and deserves strong condemnation, and I hope GitHub can strengthen anti-spam measures while ensuring legitimate users aren't unfairly affected.


这次垃圾信息攻击正在严重损害GitHub上来自中国的合法贡献者的声誉,这些恶意行为者正在破坏真正开发者的信誉,并可能导致对该地区用户实施更严格的限制,这最终伤害了整个开源社区;这种行为是可耻的,应该受到强烈谴责,同时我希望GitHub能够加强反垃圾信息措施,同时确保合法用户不会受到不公正的影响。

别把中国ip全ban了...
我已经不知道为什么而被ban过一次了...

@Nanaloveyuki
Copy link
Copy Markdown

This spam attack is severely damaging the reputation of legitimate contributors from China on GitHub, as these bad actors are undermining the credibility of genuine developers and may lead to stricter restrictions for users in the region, which ultimately hurts the entire open source community; such behavior is shameful and deserves strong condemnation, and I hope GitHub can strengthen anti-spam measures while ensuring legitimate users aren't unfairly affected.

这次垃圾信息攻击正在严重损害GitHub上来自中国的合法贡献者的声誉,这些恶意行为者正在破坏真正开发者的信誉,并可能导致对该地区用户实施更严格的限制,这最终伤害了整个开源社区;这种行为是可耻的,应该受到强烈谴责,同时我希望GitHub能够加强反垃圾信息措施,同时确保合法用户不会受到不公正的影响。

别把中国ip全ban了... 我已经不知道为什么而被ban过一次了...

说不定短期一刀切后续再恢复也不是没可能

English Perhaps a short-term one size fits all approach and subsequent recovery is not impossible

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

None yet