Shiny Girl

Published as a reply to a @browsercookies post. The researcher calls the identity highly suspicious on the grounds that it claims degrees from Canada and Germany and work in Spain, Denmark, Germany and the United States twice, almost all of it remote. Transcribed by hand from the screenshot published in the cited post, read at full resolution rather than from a thumbnail. The screenshot shows the display name Shiny Girl over the GitHub handle goldsunshines, a bio reading "Backend, automation, bot dev", and 534 followers against 700 following.

Found on 24 September 2026 by searching GitHub's commit index for every personal address this index transcribes from researchers' posts, and keeping the accounts whose own commits are signed with one. GitHub mints a noreply address from an account's immutable numeric id, in the form id+handle@users.noreply.github.com, so the former handles below are a matter of record. Counts of an account's own commits are over the 100 that GitHub's search returns for it. github.com/noahstoner is account id 135434950, created on 3 June 2023, display name Noah Stoner, bio Devops & Software engineer, location United States, 910 followers. 98 of its 100 own commits are signed shine401020@gmail.com, an address unpacker gives for the identity the researcher calls Shiny Girl, and four commits in its repositories are signed towardsunshine7@gmail.com, which the same post gives for it.

Published as a reply to a @browsercookies post. The researcher calls the identity highly suspicious on the grounds that it claims degrees from Canada and Germany and work in Spain, Denmark, Germany and the United States twice, almost all of it remote. Transcribed by hand from the screenshot published in the cited post, read at full resolution rather than from a thumbnail. The screenshot shows the display name Shiny Girl over the GitHub handle goldsunshines, a bio reading "Backend, automation, bot dev", and 534 followers against 700 following.

Found on 24 September 2026 by searching GitHub's commit index for every personal address this index transcribes from researchers' posts, and keeping the accounts whose own commits are signed with one. GitHub mints a noreply address from an account's immutable numeric id, in the form id+handle@users.noreply.github.com, so the former handles below are a matter of record. Counts of an account's own commits are over the 100 that GitHub's search returns for it. github.com/noahstoner is account id 135434950, created on 3 June 2023, display name Noah Stoner, bio Devops & Software engineer, location United States, 910 followers. 98 of its 100 own commits are signed shine401020@gmail.com, an address unpacker gives for the identity the researcher calls Shiny Girl, and four commits in its repositories are signed towardsunshine7@gmail.com, which the same post gives for it.

Published as a reply to a @browsercookies post. The researcher calls the identity highly suspicious on the grounds that it claims degrees from Canada and Germany and work in Spain, Denmark, Germany and the United States twice, almost all of it remote. Transcribed by hand from the screenshot published in the cited post, read at full resolution rather than from a thumbnail. The screenshot shows the display name Shiny Girl over the GitHub handle goldsunshines, a bio reading "Backend, automation, bot dev", and 534 followers against 700 following.

Found on 24 September 2026 by searching GitHub's commit index for every personal address this index transcribes from researchers' posts, and keeping the accounts whose own commits are signed with one. GitHub mints a noreply address from an account's immutable numeric id, in the form id+handle@users.noreply.github.com, so the former handles below are a matter of record. Counts of an account's own commits are over the 100 that GitHub's search returns for it. github.com/noahstoner is account id 135434950, created on 3 June 2023, display name Noah Stoner, bio Devops & Software engineer, location United States, 910 followers. 98 of its 100 own commits are signed shine401020@gmail.com, an address unpacker gives for the identity the researcher calls Shiny Girl, and four commits in its repositories are signed towardsunshine7@gmail.com, which the same post gives for it.

Published as a reply to a @browsercookies post. The researcher calls the identity highly suspicious on the grounds that it claims degrees from Canada and Germany and work in Spain, Denmark, Germany and the United States twice, almost all of it remote. Transcribed by hand from the screenshot published in the cited post, read at full resolution rather than from a thumbnail. The screenshot shows the display name Shiny Girl over the GitHub handle goldsunshines, a bio reading "Backend, automation, bot dev", and 534 followers against 700 following.

Heiner García's article names a network of GitHub accounts it calls the SuperStar Campaign, after the words Super, Star and Dev that recur in the handles and a SuperStar user name on one member's machine, and places it with the Contagious Interview and Wagemole activity Unit 42 reports. The network centres on Finalgoal231, a GitHub organisation of eighteen members, most of which the article judges to be fake profiles, whose discussions show members starring one another's work, coordinating through Discord and rewriting commit histories to change addresses. It shows popstar7 renaming oddcommitking to Luis96920 in a pull request, and xaramore, a follower hub from the researcher's earlier work, now deleted. The first thirty-two accounts are the article's own closing list of suspicious accounts, less the two held back below, and the article describes that list as a sample of a larger confidential set; the last four, xaramore, Finalgoal231, oddcommitking and e-nitram, are named in its body. When read on 24 September 2026, deepsea514, GoodLuck0129 and xaramore no longer resolved, and kingp08 and Topstar88 resolved to accounts created in April 2026 and July 2025, after the article, so those two handles now belong to different holders than the ones it named.

Found on 24 September 2026 by searching GitHub's commit index for every personal address this index transcribes from researchers' posts, and keeping the accounts whose own commits are signed with one. GitHub mints a noreply address from an account's immutable numeric id, in the form id+handle@users.noreply.github.com, so the former handles below are a matter of record. Counts of an account's own commits are over the 100 that GitHub's search returns for it. github.com/noahstoner is account id 135434950, created on 3 June 2023, display name Noah Stoner, bio Devops & Software engineer, location United States, 910 followers. 98 of its 100 own commits are signed shine401020@gmail.com, an address unpacker gives for the identity the researcher calls Shiny Girl, and four commits in its repositories are signed towardsunshine7@gmail.com, which the same post gives for it.