We were chatting again today, and he also showed off some evidence that absolutely convinced me. There was no way it could be him, but I have no way of sharing it with you guys, and I doubt you'd believe it anyway.
If anyone still has doubts that Oren didn't do it, just read my last post, lol. It's not fun explaining the same things over and over again.
If the website was spammed, it was probably done through a program to automatically spam it. He also showed that his replit account didn't have any new repositories created, and that's what some suspected was the source of the spam.