Fake AI PoCs Flood Exploit Repositories in 2026

The report warns that public exploit repositories are being flooded with low-quality or fake AI-generated PoCs and with repositories that actively hide malware and crypto scams; researchers observed numerous submissions lacking functional exploit code, examples of repositories modified to include disk-wiping payloads, and backdoors concealed via double base64 encoding or obfuscation. It urges security teams to strictly vet and understand code before execution, report malicious repositories to GitHub, and treat unexplained base64/obfuscated blobs with extreme suspicion.