Or it might be state threat actor trying to tire out people and then plant some stuff somewhere in between. Like Jia Tan but 100x more often or then getting their people to “help” cleaning up.

You just underestimate evil people. We are long past “bored kid in his parents basement in a hoodie”.

Any piece of OSS code that might end up used by valuable or even not so valuable target is of interest for them.