FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware

A large-scale campaign named FakeGit used thousands of malicious GitHub repositories and public AI registries to distribute SmartLoader and the StealC information stealer; the operation employed a technique called "AgentBaiting" to lure AI agents and developers into downloading disguised payloads, established persistence via scheduled tasks, resolved C2 through a Polygon smart contract, and delivered additional encrypted stages — Island researchers observed extensive repository proliferation and recorded millions of download events though not all indicate successful infections.