Cybersecurity · 46 views
FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
A large-scale operation dubbed ‘FakeGit’ is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories that accumulated more than 14 million downloads.
Summary
A large-scale operation dubbed ‘FakeGit’ is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories that accumulated more than 14 million downloads. Over 800 repositories pretended to be AI skills or MCP servers and appeared more than 600 times in public AI registries and catalogs. This increased the likelihood of being discovered by AI agents and developers, a technique that researchers call "agentbaiting."
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- Maritime Coalition Launches Free Vulnerability Database for Ship and Port SystemsContinue reading
- Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth WeaknessesContinue reading
- CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionContinue reading
- OpenAI’s August fix for theft of reasoning traces was quickly bypassedContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow