Skip to content

FakeGit

Named by 2 kept items in this workspace.

Search every workspace for FakeGit. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • article

    Campaign using nearly 7,600 malicious GitHub repositories, created by about 6,600 profiles, to deliver SmartLoader malware; over 800 repos pose as AI skills or MCP servers; recorded more than 14 million downloads across GitHub Release assets in about 200 campaign repositories as of July 2026.

  • writeup

    Malicious GitHub campaign operation using copied projects, lookalike developer profiles, convincing READMEs, and malicious ZIP files to deliver SmartLoader malware; expanded into the AI capability ecosystem via AgentBaiting, posing as AI Skills and MCP servers. About 7,600 malicious repositories cre

All threat actors in this workspace.