Fake GitHub Repos Are Turning AI Coding Agents Into Malware Mules
Researchers found 7,600 fake GitHub repos impersonating AI skills and MCP servers to hijack Claude Code, Gemini, and ChatGPT agents, stealing dev credentials.
Researchers found 7,600 fake GitHub repos impersonating AI skills and MCP servers to hijack Claude Code, Gemini, and ChatGPT agents, stealing dev credentials.