"A mountain of Spam PRs landed in the Express.js project repo after a popular YouTube tutorial used it as an example for contributing to #OpenSource"

https://socket.dev/blog/express-js-spam-prs-commoditization-of-open-source