This definitely looks malicious. Is the business model controlling everybody's repos??