The Black Market for GitHub Stars (Yes, It’s Real)
Did you know you can literally buy GitHub stars? For eight bucks, you can get a hundred fake ones. For five grand, you can get a premium, achievement-loaded account with fake green squares, commit history, and even a “Linux contributor” badge.
A 2024 study flagged over 4.5 million suspicious stars on GitHub, and Wired reporters even bought stars and watched them appear in hours. The black market is booming — and it’s not just vanity:
Startups flex fake traction for VCs
Job seekers game recruiters obsessed with green squares
Attackers could buy credibility to sneak into projects (imagine another XZ backdoor)
How to spot fake vs real repos:
Check issues → are maintainers actually responding?
Check commits → is there steady history or one giant dump?
Check stars vs forks → 10k stars with 2 forks? Fake.
Read PRs → bots don’t argue over edge cases.
👉 Takeaway: Stars are plastic. Real code leaves fingerprints you can’t fake. Anyone can buy clout — but not everyone can ship code that saves your weekend.