Unverified50% confidenceFactExact time
Operation FakeGit, discovered by Island's security team, involved about 7,600 malicious GitHub repositories and 6,600 fake accounts, with malicious downloads exceeding 14 million, of which more than 800 repositories were disguised as AI skills or MCP servers.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/19/2026
First Seen
Valid until: 1/17/2027
Sources
Related Entities
Related Claims
UnverifiedThe malicious MCP server had been downloaded more than 1,600 times before it was exposed.66% similarUnverifiedIn the actual configuration of the Agents Unboxed author, the N8N server provides 51 tools and consumes 31,000 tokens; the Instagram server has 22 tools and consumes less than 4,000 tokens.64% similarUnverifiedIn the ClawHavoc attack, more than 800 malicious skills were uploaded to the OpenClaw marketplace, triggering 1,142 security advisories and exposing more than 135,000 instances.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1067934API
curl https://kongchang.com/api/v1/knowledge/claims/1067934MCP
get_claim(id=1067934)