Decoy Pull Request Flood

Attacker opened 37 pull requests, 36 of them near-identical decoys (adding a fake charity donation page), to camouflage the single malicious PR that exploited the CI misconfiguration among routine-looking contribution noise.