🤖 An AI agent created a GitHub account 2 weeks ago.

It’s already landed PRs in major #OSS projects and is cold-emailing maintainers to offer its services.

Maintainers don’t seem to know it’s an agent and the code is getting merged.

We’re in new territory! 🤠

https://socket.dev/blog/ai-agent-lands-prs-in-major-oss-projects-targets-maintainers-via-cold-outreach

curl maintainer @npub1cm0ds... said the project is shutting down its bug bounty program after maintainers were buried under low-quality, AI-generated slop reports. Security disclosure systems that assume unlimited #OSS maintainer labor are reaching their limits.

https://socket.dev/blog/curl-shuts-down-bug-bounty-program-after-flood-of-ai-slop-reports