- A peer-reviewed CMU study (ICSE 2026) identified 6 million fake stars across 18,617 repositories using 301,000 accounts.
- Stars sell for $0.03 to $0.85 each on at least a dozen websites, Fiverr gigs, and Telegram channels.
- Redpoint Ventures found the median star count at seed is 2,850 — giving startups an exact target to buy toward.
- The FTC’s 2024 rule banning fake social influence metrics carries penalties of $53,088 per violation.
$0.06 Per Star, $10 Million Per Seed Round
A GitHub star costs $0.06 at the low end. A seed round unlocks $1 million to $10 million. The math is obvious, and thousands of repositories are exploiting it. A peer-reviewed study presented at ICSE 2026 by researchers at Carnegie Mellon University, North Carolina State University, and Socket analyzed 20 terabytes of GitHub metadata and identified approximately 6 million suspected fake stars distributed across 18,617 repositories by roughly 301,000 accounts. By July 2024, 16.66% of all repositories with 50 or more stars were involved in fake star campaigns — up from near-zero before 2022.
The marketplace is professionalized and operates in plain sight. At least a dozen websites sell stars directly, including SocialPlug.io, Buy.fans, and GitHubPromoter.com. Budget stars cost $0.03 to $0.10 each with disposable accounts. Premium vendors like the registered German company GitHub24 charge $0.85 per star with aged profiles that survive detection. Pre-built GitHub profiles with five-year commit histories and Arctic Code Vault Contributor badges sell for approximately $5,000 on Telegram. AI and LLM repositories emerged as the largest non-malicious category of fake-star recipients at 177,000 fake stars, ahead of blockchain projects in absolute volume.
VCs Are Using Stars as a Price Signal — and Startups Know It
The connection between star counts and funding is not speculative. Jordan Segall, Partner at Redpoint Ventures, published an analysis of 80 developer tool companies showing the median star count at seed financing was 2,850 and at Series A was 4,980. “Many VCs write internal scraping programs to identify fast growing GitHub projects for sourcing, and the most common metric they look toward is stars,” he confirmed. For $85 to $285 in budget stars, a startup can manufacture the seed median. Against a typical $1 million to $10 million round, the ROI ranges from 3,500x to 117,000x.
An independent analysis by Awesome Agents sampled 150 stargazer profiles per repository across 20 projects and found repos where 36% to 76% of stargazers have zero followers and fork-to-star ratios 10x below organic baselines. Union Labs, ranked #1 on the Runa Capital ROSS Index for Q2 2025 with 74,300 stars, showed 52% zero-follower accounts and was flagged with 47.4% suspected fake stars. An investment-sourcing report that VCs rely on was topped by a project with nearly half its stars suspected as artificial.
The Fork-to-Star Ratio Exposes Everything
The simplest detection heuristic is the fork-to-star ratio. A star costs nothing. A fork means someone downloaded the code to use it. Organic projects like Flask average 235 forks per 1,000 stars. Suspected manipulated repositories like Shardeum average 22. FreeDomain, a 157,000-star repository, has just 168 watchers — a ratio 26x lower than Flask. When nobody is forking or watching a massively starred repository, nobody is using it.
The FTC Consumer Review Rule, effective October 2024, explicitly prohibits buying fake indicators of social media influence for commercial purposes. Penalties reach $53,088 per violation. The SEC has already charged startup founders for inflating traction metrics during fundraising — HeadSpin’s CEO faced wire fraud charges carrying a maximum 20-year sentence. No one has been charged specifically for fake GitHub stars yet. Given the CMU research documenting the practice at scale, that gap may not last.
GitHub removed 90% of flagged repositories but left 57% of the accounts that delivered those stars intact. The infrastructure for future campaigns remains. Until platforms implement structural changes — weighted popularity metrics, account-level reputation scoring — the $50 problem with $50 million consequences will keep compounding.
Awesome Agents Investigation | CMU Study (ICSE 2026) | Redpoint Ventures
