: Scammers create fake "Hubs" or repositories with thousands of stars (often botted) to appear legitimate while hosting dangerous executables.