Someone snooped a half-finished draft of mine off GitHub and...actually got it published in a real journal: https://forbetterscience.com/2024/05/29/who-are-you-matthew-...
In spite of having a full commit log (with GitHub verified commits!!!) of both the code AND the paper, both arxiv and the journal didn't seem to care or bother at all.
Anyhow, I highly recommend reading the for better science blog. It's incredible how rampant fraud truly is. This applies to multiple nobel prize winners as well. It's nuts.