Repository navigation
[phantomstars] Fake engagement detected on this repository #139
Description
Fake Engagement Alert for luongnv89/claude-howto
phantomstars has detected a likely fake star/fork campaign targeting this repository.
Scan date: 2026-06-09
Summary
| Metric | Value |
|---|---|
| Engagers scanned (24 h window) | 292 |
| Likely fake | 8 (2.7%) |
| Suspicious | 54 |
| Previously seen likely fake | 3 (1.0%) |
| Repeat offenders | 0 |
| Allowlisted accounts excluded | 0 |
| Campaigns detected | 1 |
| Analysis mode | recent |
| Discovery sources | github_trending |
| Event coverage | capped by the recent-events API limit (300 events) |
| Repo classification | clean |
Campaigns
| Campaign ID | Members |
|---|---|
c-9183d0a1 |
62 |
Suspect accounts
| Account | Created | Score | Classification | Campaign |
|---|---|---|---|---|
| fg4gy8yscf-ai | 2026-06-08 | 0.845 | likely_fake | c-9183d0a1 |
| kaixinxiaobaike-wq | 2026-06-07 | 0.845 | likely_fake | c-9183d0a1 |
| hanx-kk | 2026-06-08 | 0.845 | likely_fake | c-9183d0a1 |
| tradinggains5018 | 2026-06-03 | 0.840 | likely_fake | c-9183d0a1 |
| Kgill0021 | 2026-06-08 | 0.815 | likely_fake | c-9183d0a1 |
| vc7ttv45yr-coder | 2026-06-06 | 0.810 | likely_fake | c-9183d0a1 |
| tpc072286-netizen | 2026-06-06 | 0.810 | likely_fake | c-9183d0a1 |
| ahaooo1324-dev | 2026-05-11 | 0.768 | likely_fake | c-9183d0a1 |
| courtawaytaylor181-debug | 2026-06-06 | 0.720 | suspicious | c-9183d0a1 |
| 0788lance-lab | 2026-05-16 | 0.718 | suspicious | c-9183d0a1 |
| Hackd-AI | 2026-06-05 | 0.690 | suspicious | c-9183d0a1 |
| iamfrivolous-sketch | 2026-05-26 | 0.688 | suspicious | c-9183d0a1 |
| g7738858 | 2026-04-06 | 0.675 | suspicious | c-9183d0a1 |
| fleshhprisonn | 2026-05-23 | 0.657 | suspicious | c-9183d0a1 |
| scotthan-design | 2026-04-18 | 0.645 | suspicious | c-9183d0a1 |
| brewtal71 | 2026-04-19 | 0.645 | suspicious | c-9183d0a1 |
| atheria-tech | 2026-03-13 | 0.645 | suspicious | c-9183d0a1 |
| cozyfashionwear | 2026-03-17 | 0.645 | suspicious | c-9183d0a1 |
| jordan-sectu | 2026-05-08 | 0.645 | suspicious | c-9183d0a1 |
| HotGirlLo | 2026-05-25 | 0.627 | suspicious | c-9183d0a1 |
| CuriousSarah | 2026-05-13 | 0.627 | suspicious | c-9183d0a1 |
| dbell1439-afk | 2026-06-08 | 0.620 | suspicious | c-9183d0a1 |
| cady1102 | 2024-01-13 | 0.605 | suspicious | c-9183d0a1 |
| darwinsg04-rgb | 2026-03-31 | 0.595 | suspicious | c-9183d0a1 |
| cantuma | 2026-04-16 | 0.590 | suspicious | c-9183d0a1 |
| taodao1983 | 2019-05-19 | 0.585 | suspicious | c-9183d0a1 |
| kcyh12138 | 2021-04-24 | 0.585 | suspicious | c-9183d0a1 |
| yeyuan148 | 2023-01-04 | 0.575 | suspicious | c-9183d0a1 |
| iRedShift | 2025-03-04 | 0.575 | suspicious | c-9183d0a1 |
| Xjljk | 2020-05-24 | 0.575 | suspicious | c-9183d0a1 |
Showing top 30 of 62 suspects by composite score.
All findings are probabilistic indicators, not accusations. False positives exist.
Individual accounts should be treated as suspicious signals, not confirmed fake actors.
Repo-level counts in this report exclude accounts present on the current false-positive allowlist.Automated scan by
phantomstars.
View full dataset
Report a false positive
Activity
luongnv89 commentedon Jun 9, 2026
is this even a thing?
tg12 commentedon Jun 10, 2026
Yeah given the ratios though your repo is popular its bound to attract attention.
luongnv89 commentedon Jun 10, 2026
what is their (attacker) objective here?
(tbh, i have rejected a lots of DM on X about pump or crypto things which is not in my interest, not sure if it is something related)
tg12 commentedon Jun 11, 2026
Scan update: 2026-06-11
c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28c-89cbca28Showing top 30 of 77 suspects by composite score.