GitHub's Fake Star Economy
Quality: 5/5
Summary
A peer-reviewed CMU study (ICSE 2026) found 6 million fake stars across 18,617 repositories using 301,000 accounts. Stars sell for $0.03 to $0.85 each, and VCs explicitly use stars as sourcing signals.
Key Finding: A GitHub star costs $0.06 at the low end. A seed round unlocks $1 million to $10 million. The ROI ranges from 3,500x to 117,000x.
Key Insights
- Scale: CMU's StarScout tool analyzed 20 terabytes of GitHub metadata - 6.7 billion events and 326 million stars from 2019 to 2024
- Acceleration: By July 2024, 16.66% of all repositories with 50+ stars were involved in fake star campaigns - up from near-zero before 2022
- AI Sector: AI/LLM repositories emerged as the largest non-malicious category of fake-star recipients, ahead of blockchain/cryptocurrency
- VC Pipeline: Redpoint found median star count at seed is 2,850; firms run automated scrapers to find fast-growing repos
- Union Labs Case: Ranked #1 on ROSS Index Q2 2025 with 47.4% suspected fake stars
- Detection Evasion: 78 repositories with detected fake star campaigns appeared on GitHub Trending
Analysis
The investigation revealed distinct fingerprints of manipulation:
- Organic baseline (Flask): Median account age 4,801 days, 5.3% zero-repo accounts, fork-to-star ratio 0.235
- Manipulated (FreeDomain): 157K stars but only 168 watchers, 81.3% zero-follower accounts, fork-to-star ratio 0.017
- AI sector mixed: Some show clear manipulation (RagaAI: 76.2% zero-follower), others relatively organic
Marketplace
At least a dozen active websites sell GitHub stars directly (SocialPlug.io, Buy.fans, Boost-Like.store, GitHubPromoter.com). Premium vendors charge $0.80-$0.90 per star using aged accounts with years of history.