This was a completely different attack chain.

To be honest, I doubt it would've gotten merged anyways.

Yeah... This is clearly, obviously, malicious.

Even the username of the submitter contains "evil". I feel like this has to be more of a joke than a real malware attempt...

I can't imagine the number of times they falsely terminated creators who don't have a big enough audience to get the attention of actual humans. This is one of the issues w/ relying on a specific platform as your source of income.

They can kick you out any time they wish, and there's nothing you can do about it.

The problem w/ this is a lot of the time is as they keep ramping up their anti-abuse measures, your old code breaks and needs to be rewritten (especially if it's an API you intend to use for a long term project).

It's just an endless cat & mouse game.

Sure, but all software rots.