I think it might be a mixture of person(s) and spambot, it leaked its own nostr nsec. Had a nostr dev's pfp for a bit