Dozens of spam issues being created on bitbucket osrf/ariac repository

[Shane Loretz]

I can't find a support channel or abuse email for bitbucket, so posting a discussion.

https://bitbucket.org/osrf/ariac/issues?status=new&status=open

Dozens of spam issues with very sketchy content are being created on the osrf/ariac repository.

I used to have admin access to this repo, but it seems I no longer do (maybe I lost it when I changed the email associated with my account?). I can't close these spam issues, and I'm not sure if there is another account that can.

[Patrik S]

Hello @Shane Loretz ,

Thanks for reaching out to Atlassian Community!

I went ahead and created an internal support ticket using the email of your community account so we can look into this issue. You should be receiving an e-mail soon with the ticket link, but in case you don't receive it, please let me know so I can share the ticket link here.

Thank you, @Shane Loretz !

Patrik S

[psyko_chewbacca]

https://bitbucket.org/psyko_chewbacca/lpcmod_os/issues

How can I mass delete spam issues???

[Patrik S]

Hello @psyko_chewbacca , 

I've moved your post to a new question so we can better track each individual's repositories. You can access the new post using this link. 

Thank you!

Patrik S

[jwilleke]

I am also having spam issues on:

https://bitbucket.org/jwilleke/examples/issues?status=new&status=open

They all show as "Former user created an issue"

And I can not find out how to open a an internal support ticket.

-jim

[jwilleke]

Can we get some help on this?

Many more today even after I madre the repository private.

@Patrik S 

[jwilleke]

I moved the repository and deleted the repository after 100s of spam notices on a repository even after I had marked it private.

Gave up on Bitbucket due to the lack of any response.

[Patrik S]

Hello @jwilleke ,

In order to prevent users that are not members of the repository to create Issues, you would actually need to make the Issue Tracker private as well by going to Repository Settings > Issue Tracker > select Private Issue tracker.

This will allow only users that have access to the repository to be able to view and create new issues.

[cdelker]

Same here: https://bitbucket.org/cdelker/schemdraw/issues

I just set my issue list to Private until this is resolved.

[nevay]

Similarly for me.  Around 50 since yesterday all following a similar pattern.

[Patrik S]

Hello @nevay ,

We would recommend temporarily setting the Issue tracker as private by going to Repository Settings > Issue Tracker > select Private Issue tracker, to prevent the creation of new spam issues.

I will post an update here once our engineering team has mitigated the issue and when it's safe to make your issue tracker public again.

Thank you, @nevay .

Patrik S

[takluyver]

I'm also seeing this on an open source repository at

https://bitbucket.org/takluyver/pynotify2/issues?status=new&status=open

I've managed to bulk delete issues through the API - I created an app password and used the bitbucket-python Python module to wrap the API (one stumbling block, where it says 'email' I had to use my bitbucket username instead of an email address). Then I can just delete issues in a loop:

for i in range(10, 20):
    client.delete_issue('pynotify2', i)
    print('Deleted', i)

[jestar_jokin]

I had 191 spam issues added to a repository.

I wrote a NodeJS CLI tool to delete them all. It will delete all issues where:

• Reporter is null
• Assignee is null
• Status is new

This was enough for me. You might need to adjust the criteria.

https://bitbucket.org/jestar_jokin/bitbucket-cleanup/

[pdf]

I've been getting personally hammered with spam for days now, due to my handle, from all over bitbucket. This is not the first time this same kind of spam campaign has been waged either, exactly the same kind of messages:

https://www.google.com/search?q=site%3Abitbucket.org+inurl%3Aissue+ebook&oq=site%3Abitbucket.org+inurl%3Aissue+ebook

Absolutely nothing I can do about it since these aren't even repos I maintain, except disable bitbucket notifications for mentions entirely on my account.

[denis-sh]

Also SPAM issues (from #41 to #54) here: https://bitbucket.org/dgui/dgui/issues