Home / Companies / Socket / Blog / Post Details
Content Deep Dive

New tea.xyz Crypto Spam Targets Open Source Projects on GitH...

Blog post from Socket

Post Details
Company
Date Published
Author
Sarah Gooding
Word Count
1,157
Company Posts That Month
20
Language
English
Hacker News Points
-
Post removed?
No
Summary

Tea.xyz, a crypto initiative designed to reward open-source developers, has inadvertently caused frustration by inundating GitHub with spam pull requests, primarily affecting open-source projects. The Tea protocol uses a Proof of Contribution ranking algorithm and requires a YAML file for project registration, which has been exploited by spammers submitting verbatim copies of PRs across repositories. Despite intentions to incentivize developers, the project's introduction has led to a surge in spam PRs, diverting valuable resources and time from legitimate open-source work. The Tea team, led by Homebrew creator Max Howell, has acknowledged the issue, dissociated from the spammers' activities, and promised measures to prevent future abuse, such as requiring GitHub API checks for legitimate contributions. However, the initial reception has been marred by skepticism, as some developers view the initiative as a crypto scam that undermines the open-source community's collaborative ethos.

Trends Found in this Post

No tracked trend matches for this post yet.

Use This Data

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.