FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories in a campaign codenamed FakeGit. Over 800 of these pose as AI skills or MCP servers to deliver SmartLoader malware. The campaign uses copied projects, lookalike developer profiles, and convincing READMEs to trick users into downloading malicious ZIP files.