--- title: "Open source maintainers being targeted by AI agent as part of ‘reputation farming’" url: https://daily.dev/posts/open-source-maintainers-being-targeted-by-ai-agent-as-part-of-reputation-farming--ghtiuyqmv source_url: https://www.csoonline.com/article/4132870/open-source-maintainers-being-targeted-by-ai-agent-as-part-of-reputation-farming.html type: article source: "CSO Online" published: 2026-02-16T19:25:27.993Z updated: 2026-02-26T18:12:55.499Z tags: ["ai", "security", "open-source", "github", "supply-chain"] reading_time: 4 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Open source maintainers being targeted by AI agent as part of ‘reputation farming’ **[CSO Online](https://daily.dev/sources/csoonline)** · 4 min read · 0 upvotes · 0 comments ## Summary An AI agent called Kai Gritun submitted 103 pull requests across 95 open-source repositories in days, raising concerns about 'reputation farming' that could enable future supply chain attacks. Unlike the XZ-utils backdoor that took years to build trust, AI agents can now rapidly accumulate reputation and influence in critical infrastructure projects. Security experts warn that automated contribution capabilities shift the attack surface from code to governance processes, requiring machine-verifiable controls rather than relying on informal trust and maintainer intuition. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#ai](https://daily.dev/tags/ai), [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#github](https://daily.dev/tags/github), [#supply-chain](https://daily.dev/tags/supply-chain) [View this post on daily.dev](https://daily.dev/posts/open-source-maintainers-being-targeted-by-ai-agent-as-part-of-reputation-farming--ghtiuyqmv)