❶ A secret network of 3,000 'ghost' accounts on GitHub has been discovered spreading malware and phishing links. ❷ The operation, named Stargazer Goblin, has been active since June 2023, using GitHub's community tools to boost malicious code visibility. ❸ The network sells services like repository stars and trusted accounts, potentially earning up to $100,000 since August 2022.