The FakeGit campaign has reactivated with over 17,600 malicious GitHub repositories distributing SmartLoader malware and the StealC infostealer. Security teams should audit their development pipelines and dependencies to prevent potential credential and data theft from compromised repositories.

malwaregithubinfostealersupply-chain
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →