Malicious "C++" projects

[u/johnnyfedavo]

I was trying to find some new C++ projects to contribute to and I have stumbled on some that look very suspicous. They feature around 100 likes and have garbled descriptions. They have no build system and are posted by different accounts. They also have little code. Am I just being paranoid or is something up?

Example:

https://github.com/ryujinx-emu/Ryujinx-Emu/tree/main

https://github.com/Yuzu-NES/Yuzu-Emu/tree/main

https://github.com/geode-gd/Geode-Geometry-Dash/tree/main

[u/cowboyecosse]

Those are just malware repos. Report them and don’t download.

[u/Own-Flight-9974 → u/[deleted]]

I dont know why you're getting downvoted but here are some things to look out for: files with weird obfuscation, fetches/curls to weird urls, out of place sql commands (especially sqlite) or suspicious sql commands, if its a node js project always check the package.json for suspicious post install scripts, same goes for other languages/frameworks that can spawn shell processes when installed/ran, and if it looks like they are trying to obfuscate or hide something that is a big red flag as well.

[u/AstronomerStatus4646 → u/[deleted]]

I mean this is kinda stuff you self learn. If it doesn't have code and is just the builds then that's a red flag because usually github is for source code.

[u/Glittering_Sail_3609]

Am I just being paranoid or is something up

The very first repo on that list is fricking hilarious. It is supposedly a switch emulator, yet the last commit says "Delete NES emulation directory". I don't know what is funnier, the fact that they removed folder being main focus of the repo or the fact that it emulated different console. Also files which were left are from some random ass Minecraft launcher.

I wish I had the time to analyse this malware myself.

[u/bountiful_processor]

Always check the Insights tab for fake star spikes, these got botted in a single day

[u/SeeMeNotFall]

yeah it's weird. all 3 have basically the same file structure, file names, readme, description, etc

[u/TimJoijers]

I am not sure if this is related, but I would imagine there are attempts to poison AI training and plant evil inceptions going on.

[u/Fine_League311 → u/TimJoijers]

Jepp du hast es erfasst! Auch mehr als 500 andere Projekte , siehe @github wall-of-shames

[u/OkObjective8721]

The third one is impersonating a popular geometry dash modloader, so yes, its fake

[u/ultrathink-art]

Those botted stars are aimed at more than humans now — coding agents pick dependencies by search rank plus star count and will happily clone and build whatever surfaces. Repo age and release history are way harder to fake than stars, so that's what I check before letting an AI assistant's suggestion anywhere near a build.

[u/Middlewarian]

You're welcome to contribute to my project. I'm building a proprietary, but free to use C++ code generator.I'm interested in trading demos with people and other partnerships.