apple / apple/container

[phantomstars] Fake engagement detected on this repository

Open
#1,692 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Swift
Stars
49.9k
Forks
1.8k
Avg merge
1d 20h
Merged PRs (30d)
22

Description

## Fake Engagement Alert for `apple/container`

[phantomstars](https://github.com/tg12/phantomstars) has detected a likely fake star/fork campaign targeting this repository.

**Scan date:** 2026-06-11

### Summary

| Metric | Value |
|--------|-------|
| Engagers scanned (24 h window) | 295 |
| Likely fake | **6** (2.0%) |
| Suspicious | 34 |
| Previously seen likely fake | 1 (0.3%) |
| Repeat offenders | 0 |
| Allowlisted accounts excluded | 0 |
| Campaigns detected | 1 |
| Analysis mode | `recent` |
| Discovery sources | github_trending |
| Event coverage | complete |
| Repo classification | `clean` |

### Campaigns

| Campaign ID | Members |
|-------------|---------|
| `c-89cbca28` | 40 |

### Suspect accounts

| Account | Created | Score | Classification | Campaign |
|---------|---------|-------|----------------|----------|
| [15688247798-lang](https://github.com/15688247798-lang) | 2026-06-11 | 0.845 | likely_fake | `c-89cbca28` |
| [2wp2mwgch7-alt](https://github.com/2wp2mwgch7-alt) | 2026-06-11 | 0.845 | likely_fake | `c-89cbca28` |
| [keshaavsharma](https://github.com/keshaavsharma) | 2026-06-09 | 0.810 | likely_fake | `c-89cbca28` |
| [hyperfocus70-afk](https://github.com/hyperfocus70-afk) | 2026-06-08 | 0.810 | likely_fake | `c-89cbca28` |
| [xiaoxuehub](https://github.com/xiaoxuehub) | 2026-06-04 | 0.780 | likely_fake | `c-89cbca28` |
| [khaldktl22-crypto](https://github.com/khaldktl22-crypto) | 2026-05-14 | 0.768 | likely_fake | `c-89cbca28` |
| [sazq1234567890-oss](https://github.com/sazq1234567890-oss) | 2026-05-31 | 0.688 | suspicious | `c-89cbca28` |
| [redredchen02-rgb](https://github.com/redredchen02-rgb) | 2026-06-04 | 0.688 | suspicious | `c-89cbca28` |
| [2kanineh](https://github.com/2kanineh) | 2026-04-28 | 0.645 | suspicious | `c-89cbca28` |
| [darkestknight7](https://github.com/darkestknight7) | 2026-05-07 | 0.645 | suspicious | `c-89cbca28` |
| [ontology-agent](https://github.com/ontology-agent) | 2026-04-08 | 0.645 | suspicious | `c-89cbca28` |
| [DarthTroll2023](https://github.com/DarthTroll2023) | 2023-07-22 | 0.605 | suspicious | `c-89cbca28` |
| [sssssdi](https://github.com/sssssdi) | 2025-11-17 | 0.605 | suspicious | `c-89cbca28` |
| [John2000-bin](https://github.com/John2000-bin) | 2026-04-26 | 0.600 | suspicious | `c-89cbca28` |
| [dushyant999gh-oss](https://github.com/dushyant999gh-oss) | 2026-05-11 | 0.595 | suspicious | `c-89cbca28` |
| [zifanwang966-beep](https://github.com/zifanwang966-beep) | 2026-03-13 | 0.590 | suspicious | `c-89cbca28` |
| [NikolaySh70](https://github.com/NikolaySh70) | 2025-01-25 | 0.575 | suspicious | `c-89cbca28` |
| [clumsyjellyfish](https://github.com/clumsyjellyfish) | 2016-01-24 | 0.575 | suspicious | `c-89cbca28` |
| [tdao01](https://github.com/tdao01) | 2020-10-07 | 0.575 | suspicious | `c-89cbca28` |
| [eduarpec](https://github.com/eduarpec) | 2025-07-12 | 0.575 | suspicious | `c-89cbca28` |
| [roblikesbacon](https://github.com/roblikesbacon) | 2025-02-14 | 0.575 | suspicious | `c-89cbca28` |
| [payara-wy](https://github.com/payara-wy) | 2019-06-27 | 0.575 | suspicious | `c-89cbca28` |
| [maxter072](https://github.com/maxter072) | 2022-03-24 | 0.575 | suspicious | `c-89cbca28` |
| [JaQuan5000](https://github.com/JaQuan5000) | 2014-07-08 | 0.550 | suspicious | `c-89cbca28` |
| [forrest20132021](https://github.com/forrest20132021) | 2021-08-10 | 0.550 | suspicious | `c-89cbca28` |
| [roniryytty-hub](https://github.com/roniryytty-hub) | 2026-03-27 | 0.535 | suspicious | `c-89cbca28` |
| [douxiaohu](https://github.com/douxiaohu) | 2021-09-16 | 0.525 | suspicious | `c-89cbca28` |
| [tianyu-2025](https://github.com/tianyu-2025) | 2025-12-21 | 0.520 | suspicious | `c-89cbca28` |
| [kirinhu](https://github.com/kirinhu) | 2015-06-06 | 0.520 | suspicious | `c-89cbca28` |
| [Fangioo](https://github.com/Fangioo) | 2016-08-30 | 0.520 | suspicious | `c-89cbca28` |

*Showing top 30 of 40 suspects by composite score.*

---

> **All findings are probabilistic indicators, not accusations. False positives exist.**
> Individual accounts should be treated as suspicious signals, not confirmed fake actors.
> Repo-level counts in this report exclude accounts present on the current false-positive allowlist.
>
> Automated scan by
> [phantomstars](https://github.com/tg12/phantomstars).
> [View full dataset](https://github.com/tg12/phantomstars/blob/main/data/repos.jsonl)
> [Report a false positive](https://github.com/tg12/phantomstars/issues/new?template=false_positive.yml)

Contributor guide

Open the contributing guide

Research direction

Review the phantomstars report in the issue body and its linked full dataset to verify the reported repository-level findings. No project file, test, entry point, or concrete change is identified, so a maintainer must define whether any actionable work is needed before implementation can begin.

Written by the indexing model from the issue text.

Assessment

Tech stack
github
Domain
security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.