[phantomstars] Fake engagement detected on this repository
- Dominant language
- Swift
- Stars
- 49.9k
- Forks
- 1.8k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 22
Description
## Fake Engagement Alert for `apple/container`
[phantomstars](https://github.com/tg12/phantomstars) has detected a likely fake star/fork campaign targeting this repository.
**Scan date:** 2026-06-11
### Summary
| Metric | Value |
|--------|-------|
| Engagers scanned (24 h window) | 295 |
| Likely fake | **6** (2.0%) |
| Suspicious | 34 |
| Previously seen likely fake | 1 (0.3%) |
| Repeat offenders | 0 |
| Allowlisted accounts excluded | 0 |
| Campaigns detected | 1 |
| Analysis mode | `recent` |
| Discovery sources | github_trending |
| Event coverage | complete |
| Repo classification | `clean` |
### Campaigns
| Campaign ID | Members |
|-------------|---------|
| `c-89cbca28` | 40 |
### Suspect accounts
| Account | Created | Score | Classification | Campaign |
|---------|---------|-------|----------------|----------|
| [15688247798-lang](https://github.com/15688247798-lang) | 2026-06-11 | 0.845 | likely_fake | `c-89cbca28` |
| [2wp2mwgch7-alt](https://github.com/2wp2mwgch7-alt) | 2026-06-11 | 0.845 | likely_fake | `c-89cbca28` |
| [keshaavsharma](https://github.com/keshaavsharma) | 2026-06-09 | 0.810 | likely_fake | `c-89cbca28` |
| [hyperfocus70-afk](https://github.com/hyperfocus70-afk) | 2026-06-08 | 0.810 | likely_fake | `c-89cbca28` |
| [xiaoxuehub](https://github.com/xiaoxuehub) | 2026-06-04 | 0.780 | likely_fake | `c-89cbca28` |
| [khaldktl22-crypto](https://github.com/khaldktl22-crypto) | 2026-05-14 | 0.768 | likely_fake | `c-89cbca28` |
| [sazq1234567890-oss](https://github.com/sazq1234567890-oss) | 2026-05-31 | 0.688 | suspicious | `c-89cbca28` |
| [redredchen02-rgb](https://github.com/redredchen02-rgb) | 2026-06-04 | 0.688 | suspicious | `c-89cbca28` |
| [2kanineh](https://github.com/2kanineh) | 2026-04-28 | 0.645 | suspicious | `c-89cbca28` |
| [darkestknight7](https://github.com/darkestknight7) | 2026-05-07 | 0.645 | suspicious | `c-89cbca28` |
| [ontology-agent](https://github.com/ontology-agent) | 2026-04-08 | 0.645 | suspicious | `c-89cbca28` |
| [DarthTroll2023](https://github.com/DarthTroll2023) | 2023-07-22 | 0.605 | suspicious | `c-89cbca28` |
| [sssssdi](https://github.com/sssssdi) | 2025-11-17 | 0.605 | suspicious | `c-89cbca28` |
| [John2000-bin](https://github.com/John2000-bin) | 2026-04-26 | 0.600 | suspicious | `c-89cbca28` |
| [dushyant999gh-oss](https://github.com/dushyant999gh-oss) | 2026-05-11 | 0.595 | suspicious | `c-89cbca28` |
| [zifanwang966-beep](https://github.com/zifanwang966-beep) | 2026-03-13 | 0.590 | suspicious | `c-89cbca28` |
| [NikolaySh70](https://github.com/NikolaySh70) | 2025-01-25 | 0.575 | suspicious | `c-89cbca28` |
| [clumsyjellyfish](https://github.com/clumsyjellyfish) | 2016-01-24 | 0.575 | suspicious | `c-89cbca28` |
| [tdao01](https://github.com/tdao01) | 2020-10-07 | 0.575 | suspicious | `c-89cbca28` |
| [eduarpec](https://github.com/eduarpec) | 2025-07-12 | 0.575 | suspicious | `c-89cbca28` |
| [roblikesbacon](https://github.com/roblikesbacon) | 2025-02-14 | 0.575 | suspicious | `c-89cbca28` |
| [payara-wy](https://github.com/payara-wy) | 2019-06-27 | 0.575 | suspicious | `c-89cbca28` |
| [maxter072](https://github.com/maxter072) | 2022-03-24 | 0.575 | suspicious | `c-89cbca28` |
| [JaQuan5000](https://github.com/JaQuan5000) | 2014-07-08 | 0.550 | suspicious | `c-89cbca28` |
| [forrest20132021](https://github.com/forrest20132021) | 2021-08-10 | 0.550 | suspicious | `c-89cbca28` |
| [roniryytty-hub](https://github.com/roniryytty-hub) | 2026-03-27 | 0.535 | suspicious | `c-89cbca28` |
| [douxiaohu](https://github.com/douxiaohu) | 2021-09-16 | 0.525 | suspicious | `c-89cbca28` |
| [tianyu-2025](https://github.com/tianyu-2025) | 2025-12-21 | 0.520 | suspicious | `c-89cbca28` |
| [kirinhu](https://github.com/kirinhu) | 2015-06-06 | 0.520 | suspicious | `c-89cbca28` |
| [Fangioo](https://github.com/Fangioo) | 2016-08-30 | 0.520 | suspicious | `c-89cbca28` |
*Showing top 30 of 40 suspects by composite score.*
---
> **All findings are probabilistic indicators, not accusations. False positives exist.**
> Individual accounts should be treated as suspicious signals, not confirmed fake actors.
> Repo-level counts in this report exclude accounts present on the current false-positive allowlist.
>
> Automated scan by
> [phantomstars](https://github.com/tg12/phantomstars).
> [View full dataset](https://github.com/tg12/phantomstars/blob/main/data/repos.jsonl)
> [Report a false positive](https://github.com/tg12/phantomstars/issues/new?template=false_positive.yml)
Contributor guide
Research direction
Review the phantomstars report in the issue body and its linked full dataset to verify the reported repository-level findings. No project file, test, entry point, or concrete change is identified, so a maintainer must define whether any actionable work is needed before implementation can begin.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github
- Domain
- security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 15/100