Sometimes you smell an American because someone wanted you to smell an American.

Operating on a target region schedule doesn't seem particularly sophisticated, at least compared to the all the efforts put into this exploit.

Interesting. Is there also a pattern in the times of day? (I don't so much mean the times in commits done by the developer because they can be fake. I'd be more interested in authentic times recorded by GitHub, if any such times are publicly accessible.)

Another thing would be to examine everything ever written by the user for linguistic clues. This might point towards particular native languages or a particular variant of English or towards there being several different authors.