GitHub Stars Under Attack: How Trust Metrics Are Being Weaponized

GitHub's star system has become a target for systematic exploitation, with bad actors using crypto airdrops, bot networks, and typosquatting to artificially inflate repository popularity. Since developers commonly treat starred projects as trustworthy, this manipulation creates a genuine supply chain attack vector where malicious code could be installed under false pretenses.