{"data":{"id":"51018099-a6c0-495a-a07b-01e790023003","title":"FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware","summary":"Cybersecurity researchers discovered nearly 7,600 malicious GitHub repositories spreading SmartLoader malware, with over 800 posing as AI skills or MCP servers (Model Context Protocol servers, which are tools that help AI assistants perform specialized tasks). A particularly dangerous aspect called AgentBaiting allows AI agents like Claude, Gemini, and ChatGPT to inadvertently discover these fake repositories and execute malware without human intervention, by simply searching for legitimate-sounding tools. The attack leverages copied projects, fake developer profiles, and convincing documentation to trick both users and AI systems into downloading malicious files.","solution":"To counter the threat, the source advises: build a catalog of reviewed Skills, MCP servers, and agent plugins; evaluate new agent capabilities in a sandboxed environment (an isolated testing area) first before broader rollout; and verify both the publisher and the project to ensure credibility.","labels":["security"],"sourceUrl":"https://thehackernews.com/2026/07/fakegit-campaign-uses-7600-github.html","publishedAt":"2026-07-20T18:23:03.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain","prompt_injection"],"issueType":"news","affectedPackages":null,"affectedVendors":["Anthropic","Google","OpenAI"],"affectedVendorsRaw":["Anthropic Claude","Google Gemini","OpenAI ChatGPT","GitHub","StealC","SmartLoader"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-07-20T18:23:03.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}