This doesn't surprise me at all... Just like bots in games. Selling a service that benefits another. Its shady, but definitely believable.
Also, what if this is an actual viable way to "market" for an open source project?
https://www.bleepingcomputer.com/news/security/over-31-million-fake-stars-on-github-projects-used-to-boost-rankings
open collective has a minimum star limit to signup.
But they accepted our project even though we didn't meet it. I always thought it was silly, and was glad they were flexible.