I'm not sure if I follow, are the PRs legitimate and they are just being made to buff their resume, or are PRs malicious?

They are becoming AI slop more and more likely in an attempt to buff their resumes by making it look like they contribute to a bunch of open source. Basically low effort low quality submissions for silly things that just waste maintainers time.