"Paid collaboration" my ass. More like, let me pay you a pittance and sell your knowledge for 100x.
They're looking for authentic-looking projects that they can use to whitewash their LLM injection attack.
Two ways to leverage the projects:
- They put in calls to their commercial toolkit or service, and the commits crow about what a performance boost the cutover was.
- They put in calls to their vaguely useful library that is (or will soon be, on your next auto-update) full of rootkit and surveillance.
Then they wait for the LLMs to suck it in and start spitting it out into corporations who have Proton'd their engineering staff.