> This isn't an SEO problem. This is a Google problem.

Sorry, but this is a SEO problem. The fake site has probably been linked to by a number of high-SEO outlets. What you should do is contact them and tell them to fix the links (to point to your site), which they should be happy to do.

I'm not sure how relevant this is anymore, but when I worked in SEO/Rep Management, when a website was dinged either by google or by hackers, we would usually spin up a new website as an umbrella website for the brand, fix their old site, and create a few smaller websites for the brand in specific niches (like if the brand was a bookseller, we'd have local websites, genre websites, etc.), link to the new websites by the umbrella site, then do a link analysis of the old site, and any news media with high authority, we'd have them update their links to point to the new umbrella website.

It was 100% a game of whack-a-mole. And while we were a reputation raiser, we were always combatting against reputation tarnishers. Car dealerships already have a bad reputation to begin with, but they hate eachother more than their customers hate them. They were our bread and butter. Same with tradespeople (plumbing, electrical, hvac, handy(wo)men).

If SEO works, that's a Google problem.

> Sorry, but this is a SEO problem.

Google linking to a fake website directly underneath the real project's repository that has a real link to the real website isn't a SEO problem, lol.