Context: The FakeGit Campaign and Its Scale

According to a report from The Hacker News, security researchers have uncovered a sprawling malware campaign called FakeGit. It uses nearly 7,600 fake GitHub repositories to spread a dangerous type of malware known as SmartLoader. Many of those repositories pretend to offer artificial intelligence tools or server connections that many developers and businesses now rely on.

What makes this campaign especially alarming is its sheer size and its target audience. The attackers created over 6,600 fake developer profiles and managed to trick users into downloading malicious ZIP files more than 14 million times. They are not just after individual users—they are also aiming at companies that trust open-source code and AI plugins as part of their daily work.

How Attackers Are Turning Trust Into a Weapon

The FakeGit campaign shows a new level of sophistication because it exploits the way people (and machines) discover tools online. Instead of sending phishing emails, the attackers planted convincing copies of real projects on GitHub. They wrote convincing documentation and used familiar names like Gmail or Docker integrations to make the downloads feel legitimate.

But the real innovation is something researchers call “AgentBaiting.” This happens when an artificial intelligence assistant—like the ones built into coding tools—searches for a useful skill and stumbles onto one of the fake repositories. The AI reads the instructions and, without any human clicking a bad link, can guide the user straight into the malware trap. This turns a helpful tool into an unwitting accomplice, and it is a threat that few Australian small businesses are ready for.

What This Means for Australian SMBs

Australian small and mid-sized businesses often rely on free or low-cost open-source software and AI helpers to stay competitive. A campaign like FakeGit directly targets that reliance. If a staff member installs a fake “AI skill” for email or project management, the malware can steal passwords, financial data, and customer information—all without setting off obvious alarms.

Because SMBs usually have smaller IT teams and tighter budgets, a single infection can cause weeks of downtime and damage to reputation. The supply-chain nature of this attack means even a cautious business can be compromised if a developer they trust uses a compromised repository. It is not just about blocking bad links anymore; it is about verifying every piece of code that enters your systems.

What You Can Do Now

  • Check the publisher of any GitHub repository or AI tool before downloading. Look for verified accounts, history, and community reviews. If the profile is brand new or has copied text, treat it as suspicious.
  • Test new AI integrations or MCP servers in a sandboxed environment first. Isolate them from your main network and real data until you are confident they are safe.
  • Create a short internal list of approved tools and plugins. Only allow staff to install software from that list until the threat passes.
  • Train your team to watch for unusual instructions from AI assistants. If an AI suggests downloading a ZIP file or running a script, pause and verify the source before proceeding.
  • Keep your endpoint security software updated and enable alerts for new executable files or script behaviour. Many security tools can now flag downloads from unverified GitHub releases.

At MS&VG, we help Australian SMBs build practical defences against evolving cyber threats like the FakeGit campaign. Our team can review your current toolchain and set up safe processes for using open-source software and AI assistants. Contact us to learn more about protecting your business without slowing it down.