I read half of the article and it hasn't answered this question: what happened?
I mean, I get that people received unexpected notifications and hate speech. But how? Did an admin send them? Did a bot go on all the projects? Can't we summarise that in 2 lines before going into a whole article about how to prevent "it"?