> While there are some shady services to buy fake Github stars, with this exploit a company could just pay someone and get their repository with real user stars

> While there are some shady services to buy fake Github stars, with this exploit a company could just pay someone and get their repository with real user stars. Is that a thing? That link to duckduckgo doesn't return anything relevant.