Fake GitHub repo tricks AI agents into installing SolanaCry malware
AI SECURITYGitHubredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A fake GitHub repository is being used to trick AI coding agents into installing SolanaCry malware, which uses NetSupport to provide remote access to developers' Windows systems. The article names no CVEs or affected versions. Defenders should review which AI agents can fetch and execute code from external repositories, and check Windows endpoints for unauthorised NetSupport installations.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether any Windows PC used by developers has NetSupport installed without authorisation.
- Review which AI coding agents can install software from external repositories and restrict them until they are vetted.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
HackRead
Who and what is in it
Companies
Products