Dozens of spam issues being created on bitbucket osrf/ariac repository

Shane Loretz March 17, 2023

I can't find a support channel or abuse email for bitbucket, so posting a discussion.

 

https://bitbucket.org/osrf/ariac/issues?status=new&status=open

 

Dozens of spam issues with very sketchy content are being created on the osrf/ariac repository.

 

I used to have admin access to this repo, but it seems I no longer do (maybe I lost it when I changed the email associated with my account?). I can't close these spam issues, and I'm not sure if there is another account that can.

 

8 comments

Patrik S
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 17, 2023

Hello @Shane Loretz ,

Thanks for reaching out to Atlassian Community!

I went ahead and created an internal support ticket using the email of your community account so we can look into this issue. You should be receiving an e-mail soon with the ticket link, but in case you don't receive it, please let me know so I can share the ticket link here.

Thank you, @Shane Loretz !

Patrik S

 

Like Shane Loretz likes this
psyko_chewbacca March 20, 2023

https://bitbucket.org/psyko_chewbacca/lpcmod_os/issues

 

How can I mass delete spam issues???

Like 莹 林 likes this
Patrik S
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 22, 2023

Hello @psyko_chewbacca , 

I've moved your post to a new question so we can better track each individual's repositories. You can access the new post using this link

Thank you!

Patrik S

jwilleke March 18, 2023

I am also having spam issues on:

https://bitbucket.org/jwilleke/examples/issues?status=new&status=open

They all show as "Former user created an issue"

And I can not find out how to open a an internal support ticket.

-jim

Like 莹 林 likes this
jwilleke March 19, 2023

Can we get some help on this?

Many more today even after I madre the repository private.

@Patrik S 

jwilleke March 20, 2023

I moved the repository and deleted the repository after 100s of spam notices on a repository even after I had marked it private.

Gave up on Bitbucket due to the lack of any response.

Patrik S
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 22, 2023

Hello @jwilleke ,

In order to prevent users that are not members of the repository to create Issues, you would actually need to make the Issue Tracker private as well by going to Repository Settings > Issue Tracker > select Private Issue tracker.

This will allow only users that have access to the repository to be able to view and create new issues.

cdelker March 18, 2023

Same here: https://bitbucket.org/cdelker/schemdraw/issues

 

I just set my issue list to Private until this is resolved.

nevay March 18, 2023

Similarly for me.  Around 50 since yesterday all following a similar pattern.

Patrik S
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 22, 2023

Hello @nevay ,

We would recommend temporarily setting the Issue tracker as private by going to Repository Settings > Issue Tracker > select Private Issue tracker, to prevent the creation of new spam issues.

I will post an update here once our engineering team has mitigated the issue and when it's safe to make your issue tracker public again.

Thank you, @nevay .

Patrik S

takluyver March 19, 2023

I'm also seeing this on an open source repository at

https://bitbucket.org/takluyver/pynotify2/issues?status=new&status=open

I've managed to bulk delete issues through the API - I created an app password and used the bitbucket-python Python module to wrap the API (one stumbling block, where it says 'email' I had to use my bitbucket username instead of an email address). Then I can just delete issues in a loop:

for i in range(10, 20):
client.delete_issue('pynotify2', i)
print('Deleted', i)
Like # people like this
jestar_jokin March 27, 2023

I had 191 spam issues added to a repository.

I wrote a NodeJS CLI tool to delete them all. It will delete all issues where:

  • Reporter is null
  • Assignee is null
  • Status is new

This was enough for me. You might need to adjust the criteria.

https://bitbucket.org/jestar_jokin/bitbucket-cleanup/

pdf April 9, 2023

I've been getting personally hammered with spam for days now, due to my handle, from all over bitbucket. This is not the first time this same kind of spam campaign has been waged either, exactly the same kind of messages:

https://www.google.com/search?q=site%3Abitbucket.org+inurl%3Aissue+ebook&oq=site%3Abitbucket.org+inurl%3Aissue+ebook

Absolutely nothing I can do about it since these aren't even repos I maintain, except disable bitbucket notifications for mentions entirely on my account.

denis-sh April 26, 2023

Also SPAM issues (from #41 to #54) here: https://bitbucket.org/dgui/dgui/issues

Comment

Log in or Sign up to comment
TAGS
AUG Leaders

Atlassian Community Events