AIThe Hacker Newsabout 13 hours ago
FakeGit Uses 7,600 Repos to Spread SmartLoader Malware
1 min read
Nearly 7,600 malicious GitHub repositories, including over 800 posing as AI skills or MCP servers, deliver SmartLoader malware in the FakeGit campaign. The malware deploys StealC to harvest data. AgentBaiting deceives AI agents like Claude Code, Gemini, and ChatGPT into discovering the repositories. Over 14 million downloads occurred across 200 campaign repositories.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGitHub
Summary by ByteBrief
