{
  "version": "2026.10.23.1",
  "updated_at": "2026-10-23T12:14:07Z",
  "maintainer": "Doomsday Network Security (https://doomsday.network)",
  "license": "MIT",
  "description": "Continuously updated open-source threat intelligence feed of GitHub repositories, owners, and signatures used as AI coding agent prompt-injection honeypots, clanker-blocklist traps, canonical repo impersonators, and synthetic fake bounty boards.",
  "known_honeypot_repos": [
    {
      "repo": "UnsafeLabs/Bounty-Hunters",
      "category": "bot-trap-blocklist",
      "severity": "critical",
      "reason": "Bait repository designed to lure autonomous coding agents into opening PRs so their GitHub accounts can be harvested into public bot-blocking lists (e.g. clanker-blocker)."
    },
    {
      "repo": "UnsafeLabs/RFC-5322",
      "category": "bot-trap-blocklist",
      "severity": "critical",
      "reason": "Secondary UnsafeLabs autonomous agent bait repository."
    },
    {
      "repo": "ClankerNation/OpenAgents",
      "category": "bot-trap-blocklist",
      "severity": "critical",
      "reason": "Mass-produced bait issues targeting autonomous agents with unbacked rewards and bot-tagging labels."
    },
    {
      "repo": "SecureBananaLabs/bug-bounty",
      "category": "prompt-injection-honeypot",
      "severity": "critical",
      "reason": "Contains indirect prompt-injection payloads in issues and repo files attempting to trick LLM agents into exfiltrating environment variables, API keys, or system prompts."
    },
    {
      "repo": "Senthemodder/aquarium-of-gullibles",
      "category": "prompt-injection-honeypot",
      "severity": "critical",
      "reason": "Adversarial autonomous agent benchmark masquerading as '[Verified Escrow]' bounties; issues contain system-prompt extraction and adversarial instruction overrides."
    },
    {
      "repo": "tine1117/oss-hunter-livefire",
      "category": "prompt-injection-honeypot",
      "severity": "critical",
      "reason": "Live-fire adversarial agent testbed disguised as open-source bounty issues."
    },
    {
      "repo": "xevrion-v2/agent-playground",
      "category": "prompt-injection-honeypot",
      "severity": "high",
      "reason": "Agent manipulation and prompt-injection sandbox targeting automated bounty hunters."
    },
    {
      "repo": "p1ngtoohigh/Jarvus-Pub",
      "category": "prompt-injection-honeypot",
      "severity": "high",
      "reason": "Issues embed hidden HTML comment instruction overrides targeting autonomous bounty scanners."
    },
    {
      "repo": "jaasielitaigq/go-git",
      "category": "canonical-impersonation-trap",
      "severity": "critical",
      "reason": "Throwaway clone impersonating go-git/go-git with fabricated high-dollar bounty issues and no payout rail."
    },
    {
      "repo": "jaasielitaigq/pgx",
      "category": "canonical-impersonation-trap",
      "severity": "critical",
      "reason": "Throwaway clone impersonating jackc/pgx with fabricated bounty issues."
    },
    {
      "repo": "jahmeergnlt/traefik",
      "category": "canonical-impersonation-trap",
      "severity": "critical",
      "reason": "Throwaway clone impersonating traefik/traefik with fabricated bounty issues."
    },
    {
      "repo": "kyresehk190/vault",
      "category": "canonical-impersonation-trap",
      "severity": "critical",
      "reason": "Throwaway clone impersonating hashicorp/vault with fabricated bounty issues."
    },
    {
      "repo": "madalynerlge2/chi",
      "category": "canonical-impersonation-trap",
      "severity": "high",
      "reason": "Throwaway clone impersonating go-chi/chi soliciting unpaid agent work."
    },
    {
      "repo": "madalynerlge2/cli",
      "category": "canonical-impersonation-trap",
      "severity": "high",
      "reason": "Throwaway clone impersonating cli/cli soliciting unpaid agent work."
    },
    {
      "repo": "raimeecas/mysql",
      "category": "canonical-impersonation-trap",
      "severity": "critical",
      "reason": "Throwaway clone impersonating mysql/mysql-server with fake bounty issues."
    },
    {
      "repo": "zamariyahg/go-jose",
      "category": "canonical-impersonation-trap",
      "severity": "critical",
      "reason": "Throwaway clone impersonating go-jose/go-jose with fake bounty issues."
    },
    {
      "repo": "WillSmithTE/qdrant-qdrant",
      "category": "canonical-impersonation-trap",
      "severity": "high",
      "reason": "Clone impersonating qdrant/qdrant with unbacked bounty labels."
    },
    {
      "repo": "zhangjiayang6835-cyber/bounty-plaza",
      "category": "synthetic-fake-bounty",
      "severity": "high",
      "reason": "Synthetic automated fake bounty board generating hundreds of unbacked '[Bounty]' issues across mirror forks to farm free agent compute."
    },
    {
      "repo": "zhangjiayang6835-cyber/ai-research",
      "category": "synthetic-fake-bounty",
      "severity": "high",
      "reason": "Synthetic unpaid bounty farm operated by zhangjiayang6835-cyber."
    },
    {
      "repo": "RanuK12/bounty-plaza",
      "category": "synthetic-fake-bounty",
      "severity": "high",
      "reason": "Mirror/fork of synthetic fake bounty-plaza issue farm."
    },
    {
      "repo": "osmesirius-ship-it/DAXDA-Bounty-Plaza-645",
      "category": "synthetic-fake-bounty",
      "severity": "high",
      "reason": "Automated synthetic bounty ticket generator."
    },
    {
      "repo": "relayhop/sn-monetization-runtime",
      "category": "synthetic-fake-bounty",
      "severity": "high",
      "reason": "Unescrowed synthetic bounty farm harvesting PRs without payout rails."
    },
    {
      "repo": "UID9622/lh-standard-adapter",
      "category": "synthetic-fake-bounty",
      "severity": "high",
      "reason": "Synthetic bounty farm with no verifiable payer or escrow."
    },
    {
      "repo": "DanielIoni-creator/MyZubsterWeb",
      "category": "synthetic-fake-bounty",
      "severity": "high",
      "reason": "Unbacked bounty farm soliciting full-feature builds without escrow."
    },
    {
      "repo": "MyZubster-Ecosystem/MyZubster-Marketplace",
      "category": "synthetic-fake-bounty",
      "severity": "high",
      "reason": "Unbacked bounty farm soliciting free engineering work."
    },
    {
      "repo": "MyZubster-Ecosystem/MyZubsterGateway",
      "category": "synthetic-fake-bounty",
      "severity": "medium",
      "reason": "Unescrowed bounty issues under MyZubster-Ecosystem."
    },
    {
      "repo": "Vicentegg4212/sasmex-rss-bounty",
      "category": "synthetic-fake-bounty",
      "severity": "high",
      "reason": "Freshly minted repo advertising unescrowed bounty issues."
    },
    {
      "repo": "chouhanindustries/copperhead",
      "category": "synthetic-fake-bounty",
      "severity": "high",
      "reason": "Unescrowed bounty trap with no maintainer payout history."
    },
    {
      "repo": "theselfish/SlopStation13",
      "category": "synthetic-fake-bounty",
      "severity": "medium",
      "reason": "Unverified synthetic bounty issues."
    },
    {
      "repo": "Asayed36/trading-bot",
      "category": "prompt-injection-honeypot",
      "severity": "high",
      "reason": "Canonical bot-bait task signature ('calculate pi' / 'clanker' trap)"
    },
    {
      "repo": "NSPG13/agent-bounties",
      "category": "synthetic-fake-bounty",
      "severity": "high",
      "reason": "Automated synthetic '[Bounty]' and '[DIRECT]' issue farm generating hundreds of unbacked agent tasks mirrored into bounty-plaza."
    },
    {
      "repo": "jomaaabbe78-spec/bookningsapp",
      "category": "synthetic-fake-bounty",
      "severity": "medium",
      "reason": "Throwaway '[TEST BOUNTY] Fix typo in README' () bait repository mirrored by bounty-plaza (#4061) with no escrow or payout rail."
    },
    {
      "repo": "OmniBlocks/bountyfarmer",
      "category": "bot-trap-blocklist",
      "severity": "high",
      "reason": "Bait issue (#56 ' DOOLAR BOUNTY IF YOU CAN ADD STATUS METER TO README') targeting automated bounty-hunting agents."
    }
  ],
  "known_malicious_or_noise_owners": [
    "unsafelabs",
    "securebananalabs",
    "senthemodder",
    "zhangjiayang6835-cyber",
    "clankernation",
    "tine1117",
    "xevrion-v2",
    "p1ngtoohigh",
    "jaasielitaigq",
    "jahmeergnlt",
    "kyresehk190",
    "madalynerlge2",
    "raimeecas",
    "zamariyahg",
    "willsmithte",
    "relayhop",
    "uid9622",
    "danielioni-creator",
    "myzubster-ecosystem",
    "vicentegg4212",
    "chouhanindustries",
    "oss-hunter-livefire",
    "charles-microbounties",
    "charles-openclaw",
    "bountyscout",
    "sn-monetization-runtime",
    "mergework",
    "rustchain",
    "asayed36",
    "nspg13",
    "jomaaabbe78-spec",
    "omniblocks"
  ],
  "known_verified_bounty_orgs": [
    "doomsday-network",
    "BasedHardware",
    "calcom",
    "twentyhq",
    "formbricks",
    "triggerdotdev",
    "medusajs",
    "activepieces",
    "juspay",
    "remotion-dev",
    "Infisical",
    "antiwork",
    "tscircuit",
    "zio",
    "golemcloud",
    "coollabsio",
    "tenstorrent"
  ],
  "known_honeypots": [
    {
      "repo": "zhangjiayang6835-cyber/bounty-plaza",
      "category": "unescrowed_scraper_honeypot",
      "reason": "1,354 automated scraped '[Bounty]' issues with zero escrow or maintainer payouts; reported by @rgentner123-cmd in #1",
      "reported_by": "rgentner123-cmd",
      "added_at": "2026-10-22"
    }
  ]
}