Spending $200 to Buy GitHub Stars, Scamming VCs Out of Millions: The Full Exposure of GitHub’s Fake-Star Industrial Chain
TechFlow Selected TechFlow Selected
Spending $200 to Buy GitHub Stars, Scamming VCs Out of Millions: The Full Exposure of GitHub’s Fake-Star Industrial Chain
“Star counts can be faked, but a bug fix that saves someone’s weekend cannot.”
Navigating Web3 tides with focused insightsAuthor: Claude, TechFlow
TechFlow Introduction: A peer-reviewed study by Carnegie Mellon University (CMU) found approximately 6 million fake GitHub Stars across 18,600 repositories and 301,000 accounts. AI/LLM projects constitute the largest non-malicious category of star inflation. Fake stars are sold on gray-market platforms for as little as $0.03 each; meanwhile, Redpoint data shows that the median number of Stars for VC seed-stage projects is 2,850—meaning less than $200 can “buy” artificial popularity sufficient to meet seed-round thresholds.
GitHub Stars (i.e., “likes”) are devolving into a meticulously packaged fraud.
According to an investigative report released on April 13 by Awesome Agents, a mature gray-market ecosystem centered on GitHub Stars is now operating openly in plain sight: academic research has quantified the scale of the problem; over a dozen websites openly sell Stars; and venture capital firms directly incorporate Star counts into their project screening criteria.
The investigation team independently verified 20 repositories and found that, for some projects, 36% to 76% of Stars originated from zero-follower accounts, and the fork-to-star ratio fell below one-tenth of the baseline observed for organic projects.
The core academic foundation for this report is a peer-reviewed paper jointly published by CMU, North Carolina State University, and Socket at ICSE 2026 (the International Conference on Software Engineering). The research team’s detection tool, StarScout, analyzed 20 TB of GitHub metadata—including 6.7 billion events and 326 million Stars—covering activity from 2019 through 2024. It ultimately flagged approximately 6 million suspicious fake Stars, 18,600 implicated repositories, and roughly 301,000 participating accounts.
6 Million Fake Stars: Explosive Growth in 2024, AI Projects Hit Hardest
Fake Stars are not new—but their scale exploded in 2024. According to CMU’s paper, fewer than 10 repositories per month were involved in fake-Star activity before 2022; by July 2024—the peak—the figure surged to 3,216 repositories and 30,779 participating accounts. As of July 2024, 16.66% of repositories with more than 50 Stars had engaged in fake-Star activity.
The research team’s detection accuracy received indirect validation from GitHub’s own enforcement actions: 90.42% of repositories flagged by StarScout have since been deleted, and 57.07% of flagged accounts have been removed.
While most fake Stars serve short-lived phishing or malware repositories, among non-malicious categories, AI and LLM-related projects ranked first—accounting for 177,000 fake Stars, surpassing blockchain/crypto projects. The paper notes that “many of these are academic paper repositories or products from LLM-focused startups.” Crucially, 78 repositories detected with fake-Star activity appeared on GitHub’s Trending page—demonstrating that purchased Stars can successfully manipulate the platform’s recommendation algorithm.
As Low as $0.03 Per Star: Publicly Operated Star-Inflation Markets
This is not dark-web trade. The investigative report confirms at least a dozen websites openly sell GitHub Stars—including SocialPlug.io, Buy.fans, and Boost-Like.store. Fiverr hosts 24 active Star-inflation services, ranging from $5 basic packages to “organic promotion” bundles priced above $25.
Pricing falls into three tiers: low-cost (one-time newly created accounts) at $0.03–$0.10 per Star; mid-tier at $0.20–$0.50; and premium (long-established, cultivated accounts) at $0.80–$0.90. Premium services promise “non-dropping” Stars and 30-day replenishment guarantees. SocialPlug claims to have delivered 3.1 million Stars to over 53,000 customers—and even offers an API for programmatic bulk procurement.
Star-exchange platforms such as GithubStarMate.com and SafeStarExchange.com use point-based mutual-boosting models, enabling users to exchange Stars without spending money. At least seven open-source tools on GitHub—including fake-git-history and commit-bot—are explicitly designed to forge contribution graphs. Pre-made GitHub accounts with five years of commit history and Arctic Code Vault contributor badges sell for ~$5,000 on Telegram.
A 2020 Tsinghua University study documented operations within Chinese QQ and WeChat promotion groups: groups exceeding 1,020 members process about 20 repository boosting tasks daily, generating an estimated annual industry profit of $3.4–$4.4 million.
VCs Use Stars for Screening—Spend $200 to “Qualify” for Seed Funding
The link between Stars and fundraising isn’t speculation—it’s publicly acknowledged by VCs themselves.
Jordan Segall, Partner at Redpoint Ventures, analyzed 80 developer-tool companies and found the median GitHub Star count at seed stage was 2,850, rising to 4,980 at Series A. He stated explicitly: “Many VCs write internal crawlers to identify GitHub projects with rapid Star growth—Stars are the metric they watch most closely.”
These figures effectively amount to a precise procurement checklist for startups. Using low-cost Stars, a startup could generate 2,850 Stars for $85–$285—reaching the seed-stage median. Reaching the Series A threshold would cost $990–$4,500. Against typical seed rounds of $1M–$10M, the return-on-investment ratio ranges from 3,500× to 117,000×.
Runa Capital’s quarterly ROSS Index (ranking open-source startups) further amplifies this incentive. As reported by TechCrunch, 68% of ROSS-listed companies secured seed funding, with tracked financing totaling $169 million. Independent analysis in the investigative report found that Union Labs—the #1-ranked company on the Q2 2025 ROSS Index (with a 54.2× Star growth, totaling 74,300 Stars)—exhibits severe star-inflation indicators: 32.7% of its Stars came from zero-repo accounts; 52% from zero-follower accounts; and StarScout flagged 47.4% of its Stars as suspicious. A widely cited VC industry ranking features a top-ranked project where nearly half its Stars appear fraudulent.
Real-world cases confirm the Star-to-funding pipeline: Lovable (formerly GPT Engineer), boasting 50,000+ Stars, raised a $7.5M pre-seed round and achieved an $1.8B Series A valuation; Browser-use garnered 50,000 Stars in three months and secured a $17M seed round; Pangolin entered Y Combinator with just 1,000 Stars and closed a $4.7M seed round within eight months.
GitHub’s Enforcement Is Asymmetric: Repositories Deleted, Accounts Left Intact
GitHub’s Acceptable Use Policy explicitly prohibits “artificial engagement,” “ranking manipulation,” and secondary markets for fake Stars—and even specifically bans star-inflation incentivized by “crypto airdrops.”
Yet enforcement remains passive and asymmetric. GitHub deleted 90.42% of repositories flagged by StarScout but cleaned only 57.07% of the executing accounts. Most of the “labor force” behind the fake-Star economy remains intact. After Dagster published its 2023 investigation report, related fake-Star accounts were purged within 48 hours—but this was a reactive response to public exposure, not proactive detection.
The CMU research team recommends GitHub replace raw Star counts with a network-centrality-weighted popularity metric to structurally dismantle the fake-Star economy. GitHub has yet to implement this.
This creates a self-reinforcing cycle: VCs use Stars as a screening signal → startups inflate Stars → VCs perceive artificial momentum → more VCs adopt Star tracking → more startups inflate Stars. Redpoint’s publicly disclosed benchmarks (2,850 for seed, 4,980 for Series A) effectively function as a price-list for startups.
As one commentator noted in the investigative report: “Star counts can be faked—but a bug fix that saves someone’s weekend cannot.”
Join TechFlow official community to stay tuned
Telegram:https://t.me/TechFlowDaily
X (Twitter):https://x.com/TechFlowPost
X (Twitter) EN:https://x.com/BlockFlow_News
深潮TechFlow
