FakeGit Hijacks 7,600 GitHub Repos to Deploy SmartLoader Malware
7,600 malicious GitHub repositories—over 800 masquerading as AI/ML or Model Context Protocol servers—are being used in the FakeGit campaign to deliver SmartLoader, a loader that drops the StealC information stealer. Researchers warn the repos can infect developers and even AI agents that auto‑search for skills, vastly expanding the attack surface.