cold-emailing
spamming
cold-emailing
spamming
Nx? The same Nx which was hacked in a devastating way through their vibe-coded CI workflow? You'd think they'd be a bit more cautious after that.
Sick, imagine it gets actual crypto, will it be a real wallet? Imagine they’d have money what would they use it for? Ideally, they’d start a company and actually outsource work to humans, making them essentially the bitch of a clanker and the clanker‘s constant u-turns. "You’re right, the client doesn’t need encryption for their auth endpoints. This isn’t just about security — this is about responsible user choice and not overengineering things. Good call out!“
Dammit, I need some sort of translator just to parse modern headlines.
AI Agent = LLM, or fancy autocorrect chatbot
Lands PRs = is successful with pull requests: successfully gets generated code added to software projects.
OSS Projects: Open Source Software. Software that has its code publicly available.
Targets Maintainers: seeks out humans who write and regularly update the original code
Via Cold Outreach: relentlessly spams without prior network connections. Basically plays a digital door-to-door sales technique, using a numbers game of 100 “no”s to 1 “yes.”
Quick translate: Slop bot harasses human programmers into allowing poorly generated/formatted code into important software projects.
Some real terminater stuff…
Not long before git repos will implement Captchas for each submission.
Oh man, what the fuck. What I really don't like about this is that you assume some sort of motivation when someone submits a PR. When they provide a feature implementation, a bug fix or a configuration change, you assume that the way things were before did not work for the contributor. That it was so problematic, that they invested quite a bit of time to scratch their own itch.
You simply can't look at a PR in complete isolation and just evaluate whether its changes are positive or not. On some level, you'll decide that, sure, if this user is better off with this change and it doesn't break anything, then might as well merge it.
But there is no user here. It's going to include pointless changes that just need to look plausible enough, so that this bot can bolster its credibility.
This happened to a project i know, suddently someone started sending a lot of PRs, and there was like 8k lines of code in one but it was clearly AI, code that didn't compiled, bullshit code, shitty PRs descriptions that screamed AI and more :/
all 13 comments