Executive Summary
FakeGit uses about 7,600 malicious GitHub repos, 800+ posing as AI skills or MCP servers, to spread SmartLoader.
What Happened
Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign codenamed FakeGit. "FakeGit uses copied projects, lookalike developer profiles, convincing READMEs, and malicious ZIP
Affected Products
- GitHub
Vulnerability / Attack Technique
Fake AI skills and MCP servers
Technical Mechanism
Copied projects with malicious ZIPs.
AI Security Category
LLM03:2025 Supply Chain
Part of the MCP Security topic.
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
Fake MCP servers are now a common lure. RealGround analysis: install MCP servers only from verified sources.
Recommended Controls
- Allowlist MCP servers and skills
- Verify repository authenticity
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/07/fakegit-campaign-uses-7600-github.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.