> TritonInfoSec News
Home / Jul 22, 2026 / Story
0
#6 BleepingComputer general July 21, 2026 at 22:34 UTC

FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware

By Bill Toulas

AI Summary

The 'FakeGit' campaign has weaponized 7,600 malicious GitHub repositories to distribute SmartLoader and StealC malware, accumulating over 14 million downloads. The scale of this supply chain-style attack on the developer ecosystem makes it a critical threat for security teams monitoring open-source dependency risk and developer endpoint compromise.

Read full article → https://www.bleepingcomputer.com/news/security/fak…

Relevance score: 85.0/100

# More from July 22

  1. 1
    Critical SharePoint RCE flaw exploited to steal machine keys BleepingComputer
  2. 2
    Critical wp2shell WordPress flaws exploited to install webshells BleepingComputer
  3. 3
    Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access The Hacker News
  4. 4
    SonicWall SMA1000 flaws exploited as zero-days to push custom malware BleepingComputer
  5. 5
    Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution The Hacker News
  6. 7
    Police dismantle Kratos phishing platform, arrest developer BleepingComputer
  7. 8
    New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack The Hacker News
  8. 9
    Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes BleepingComputer
  9. 10
    HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050 The Hacker News