Fake PoCs Wasting Everyone's Time

The Ashwesker GitHub account got called out by Chocapikk for publishing fake PoC exploits, following a pattern of creating repositories named after real, freshly published CVEs to farm attention from security researchers. The account had multiple similarly structured repos covering Oracle, Microsoft Office, AdonisJS and OpenCode bugs (CVE-2026-21962, CVE-2026-21509, CVE-2026-21440, CVE-2026-22812), each mimicking legitimate exploit code. The account’s profile shows the scale: 127 repositories, the most popular being one for the React Server Components RCE CVE-2025-55182 with 84 stars and 33 forks. A timely reminder that blindly running PoCs from GitHub is the security researcher equivalent of eating candy from strangers.