https://www.planetjon.net/news/cybersecurity/beware-githubs-fake-popularity-scam-tricking-developers-into-downloading-malware/
Beware: GitHub’s Fake Popularity Scam Tricking Developers into Downloading Malware