So if I understand this correctly it’s possible for anyone to make someone else liable for copyright or patent violations by creating a PR on their repo then arranging for them to get sued?
In the U.S., the DMCA's safe harbor would probably protect them if they took the content down and forwarded the notice to the poster. Not sure about patent law.