Check Point Research has discovered a network of GitHub accounts that have been used to distribute malware and malicious links. The accounts also “perform other actions such as starring, forking, and subscribing to malicious repositories to make them appear legitimate.” Check Point Research calls the threat actor group Stargazer Goblin, and calls their network Stargazers Ghost Network. Check Point researchers estimate that the network includes more than 3,000 active accounts. Ref https://research.checkpoint.com/2024/stargazers-ghost-network/
