Breach404
Back to Insights
Cybersecurity2 min readJuly 21, 2026

FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware

A widespread malware campaign called FakeGit has distributed SmartLoader and StealC malware through over 7,600 fake GitHub repositories that have been downloaded more than 14 million times, posing a significant risk to developers and organizations that re

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site — headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now — It's Free