FakeGit malware campaign returns with 17,610 malicious GitHub repos

As cited

Copy frozen at 2026-10-09 02:21 UTC (site build).

threat intel

FakeGit malware campaign returns with 17,610 malicious GitHub repos

The FakeGit malware campaign has reactivated and created over 17,000 malicious GitHub repositories to distribute SmartLoader malware. The campaign previously pushed the StealC infostealer earlier this month.

Why it matters: Developers using GitHub for dependency management face risk of pulling compromised code; teams should audit recent repository additions and implement supply chain verification controls.

Source published

2026-10-08 17:10 UTC

First seen by Cybersecurity Tracker

2026-10-08 22:48 UTC