Security · 12h ago
FakeGit Campaign Uses 7,600 GitHub Repos to Spread SmartLoader Malware
Researchers uncovered nearly 7,600 malicious GitHub repositories in the FakeGit campaign, with over 800 posing as AI tools or MCP servers. The repos deliver SmartLoader malware through copied projects and fake developer profiles. The campaign exploits trust in open-source platforms to infect developers.
Meridian48 take
The scale of this campaign underscores how attackers weaponize GitHub's reputation, making it a critical vector for supply-chain attacks.
Read the full reporting
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware →
The Hacker News
github-malwaresupply-chain-attack