Researchers from Carnegie Mellon University, Socket, and North Carolina State University have found that fake stars are being used to promote malicious GitHub repositories, with roughly 4.5 million fake stars detected in a five-year period. This false popularity can be exploited in various ways, such as influencing the allocation of venture capital. The researchers developed a tool called ‘StarScout’ to detect these fake stars.

From Missiles to Malware: India-Pakistan Cyber Rivalry and Lessons for Taiwan – Taiwan Insight
From Missiles to Malware: India-Pakistan Cyber Rivalry and Lessons for Taiwan Taiwan Insight