Over 3.1 million fake "stars" on GitHub projects used to boost rankings