GitGuardian traces a spam campaign that drove GitHub's public commit rate to 40 million a day

Sources: primary, discussion
Summary: GitGuardian traces a spam campaign that took the public commit rate from 8 million a day in June to close to 40 million on 2026-07-31. It reports 728 of the last 1,000 GitHub Archive events belong to the campaign, and that the pushes serve an ad redirect chain. GitHub's commit, repository and active-user counts are inflated by the same activity.
Why it matters: The public events API is the measurement surface a lot of tooling reads, and with the feed pinned at its 300-event cap anything sampling it now samples advertising rather than development.