Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Martin Hamilton (m@martinh.net)'s status on Monday, 23-Feb-2026 11:56:09 JST Martin Hamilton

   in reply to

   @CoralineAda @mcc Thank you so much for this, Coraline - you may have just saved humanity! :blobthanks:

   Hmmm. Perhaps we could use the GH API to give us an early warning when a much loved codebase is compromised. Maybe starting with something like this:

   curl -s -H "Authorization: Bearer $AUTH_TOKEN" \
   -H "Accept: application/vnd.github+json" \
   "https://api.github.com/search/issues?q=is:pr+is:merged+author:claude&per_page=100&page=1" \
   | jq -r '.items[].repository_url | sub("https://api.github.com/repos/";"")' \
   | sort \
   | uniq -c
   

   This gets us a very lazyweb list of recently infected repos, although there are only ten results returned, with no pagination. That's a bit less than the 2.3 million commits reported in the web UI :blobfoxconfused:

   1 biner88/chart_sparkline
   1 davidray/twitter-bootstrap-calendar
   1 laudspeaker/laudspeaker
   1 ripienaar/free-for-dev
   4 segmentio/action-destinations
   2 uptech/flutter_app_analytics
   (etc)
   

   Also author:claude is of course but one vector for the hungry ghosts... :sadturtle: