This is a scary trend. I have seen quite a few repos with fully autogenerated code. Some sort of reporting would be required. On GitHub side one check that could expose such bad actors would be to monitor how much code is committed per time period (this particular guy did most of the code 2-3 months ago).