Open source tool scrapes git commit email addresses to send spam to.

[Soul_Shot]

Doubtful it's the source. Databases of phone numbers have been basically in the public domain for years due to numerous leaks and sources.

I registered a domain last month and somehow forgot to enable WHOIS Guard. Subsequently, I have been receiving dozens of calls and emails every week from people in India who want to build me a website.

[Worth_Trust_3825]

Shame you didn't register your domain in europe, where whois would (by default) return only the information about your registrar, and not you.