Knowing this, threat actors have now gone on to create automated accounts to artificially star their dodgy repositories to spread malware. GitHub star ratings helping to spread malware The company ...
GitHub uses the stars as part of a global ranking system and to show you related content that it thinks you may like. "You can star repositories and topics to discover similar projects on GitHub.