This is an itch problem, but it’s also a dev problem. Devs already have tools for dealing with spam in their comment sections, they just have to use them. Devs get notified when somebody posts in their comment sections. Devs can delete comments. Devs can even ban commenters.
Edit: you can also report directly to Github. If you see a scammer website that look like bob.github.io/something/, that means that bob is the name of a github user account. You can then go to https://github.com/bob and press the block/report button to report the user account to Github. It’s usually more effective to take down the scammer’s website than to report each of the scammer’s posts individually.