Check here for an example: https://gitlab.com/soapbox-pub/gleasonator-policy/-/blob/main/mod.ts?ref_type=heads#L54
Btw some still got through because of my web-of-trust setup. It seems somebody in the WoT is following tzongocu@getalby.com, and this account always follows the new spam pubkeys. Therefore tzongocu is the true spammer.