as you noted its even chance tis auto-generated or included in a large batch of copycat activities trying to copycat any repos which have certain engagement with them.

you could contact github about that sid e if there's issues on there, but thats MS so they arent always as helpful. For the social media thats a bit shittier, as people are free to register names, its not illegal or against the EULA.

if you are worried about scams, you could put a note or an additional .md file on your projects which emphasizes these accounts are not affiliated to your project. - depending on the volume of impersonations that might be a bit much bookkeeping, so perhaps a generic message on readme.md that there are people impersonating, and if applicable a list of your own accounts that _are_ affiliated with the project. - then atleast/perhaps people can be aware of the situation from visiting your github.