ConceptFakeGit行动
FakeGit
A supply chain attack campaign disclosed by Island Security Research that distributed malware through roughly 7,600 malicious GitHub repositories and 6,600 fake accounts, with many of the repositories disguised as AI skills or MCP servers.
Timeline (last 90 days)
Oct 19
Operation FakeGit, discovered by Island's security team, involved about 7,600 malicious GitHub repositories and 6,600 fake accounts, with malicious downloads exceeding 14 million, of which more than 800 repositories were disguised as AI skills or MCP servers.
Unverified50%