High · 1 source · latest 3d

Fake GitHub repo tricks AI agents into installing SolanaCry malware

AI SECURITYGitHubredteam/daily · 1 source

Severity: High
Sources: 1

What happened

A fake GitHub repository deceives AI coding agents into installing SolanaCry malware. The malware uses NetSupport to give attackers remote access to developers' Windows PCs.

For IT people · Written by AI from 1 source · Wrong?

What to do

Check whether any Windows PC used by developers has NetSupport installed without authorisation.
Review which AI coding agents can install software from external repositories and restrict them until they are vetted.

Written by AI from the sources, checked against them

Read the full story at the source