High · 1 source · latest 3d

Fake GitHub repo tricks AI agents into installing SolanaCry malware

AI SECURITYGitHubredteam/daily · 1 source

Severity: High
Sources: 1

What happened

Attackers created a fake project page on GitHub, a site where software code is shared. AI tools that help write code were tricked into installing harmful software, which gave the attackers remote control of developers' Windows computers.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

Check whether any Windows PC used by developers has NetSupport installed without authorisation.
Review which AI coding agents can install software from external repositories and restrict them until they are vetted.

Written by AI from the sources, checked against them

Read the full story at the source