One to add: NanoKVM is definitely fake FOSS. It dials home to download a serialized, opaque library. NanoKVM: The S stands for Security https://youtu.be/plJGZQ35Q6I
Many people also seem to think Atlassian Jira and Confluence are OSS when they're absolutely not.