I got a pull request from "tea.xyz" related individual and unraveled a mess of a disappointing project.

Hacker News is a community-driven platform for sharing and discussing technology news, startups, and programming-related topics. Through user submissions and comments, Hacker News offers insights into emerging technology trends, industry developments, and entrepreneurial ventures. Readers can participate in discussions, share their insights, and stay informed about the latest advancements in technology and innovation.

Hacker News

The post discusses the disappointment with tea.xyz, a token-based crypto platform, that is being abused by users to claim ownership of open source projects on GitHub through fraudulent pull requests.

The disappointing tea.xyz

<p>I am just afraid of careless and unwanted accept of these PRs, because it can happen to everyone who has public repo and I don’t think that it is so easy reversable (until it will check everytime if there is that file - but I am not sure that Tea will actually do this)</p>
