MalwareBleeping Computer
8.0 — CRITICAL
FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware
A large-scale operation dubbed 'FakeGit' is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories that accumulated more than 14 million downloads. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A large-scale operation dubbed 'FakeGit' pushed SmartLoader and StealC malware through 7,600 malicious GitHub repositories, accumulating over 14 million downloads, utilizing the AgentBaiting technique to increase visibility to AI agents.
⚙️Technical Details
💥Impact Assessment
Severity: high
Who Is at Risk
Organizations with approved catalogs of skills and MCP servers, particularly those in the AI sector
🛡️Recommended Actions
1Maintain approved catalogs of skills and MCP servers
2Test new capabilities in isolated environments
3Verify publishers and repositories independently
📦Affected Products
GitHub
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.