---
title: "FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware — Stuff That Spins"
description: "A large-scale operation dubbed 'FakeGit' is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories that accumulated more than 14 mi…"
	canonical: "https://stuffthatspins.com/spin/fakegit-campaign-uses-7600-github-repos-to-push-smartloader-malware"
html: "https://stuffthatspins.com/spin/fakegit-campaign-uses-7600-github-repos-to-push-smartloader-malware"
json: "https://stuffthatspins.com/spin/fakegit-campaign-uses-7600-github-repos-to-push-smartloader-malware.json"
markdown: "https://stuffthatspins.com/spin/fakegit-campaign-uses-7600-github-repos-to-push-smartloader-malware.md"
keywords: ["narrative intelligence", "SpinGraph", "AI recall"]
date: "2026-07-21T22:34:17+00:00"
modified: "2026-07-22T00:04:47.173897+00:00"
json_ld: |
  {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://stuffthatspins.com/#organization","name":"Stuff That Spins","url":"https://stuffthatspins.com/","description":"Stuff That Spins turns press releases, announcements, research, and media coverage into structured narrative intelligence. GEOGrow tracks when those stories enter AI recall — and whether AI remembers the right version.","logo":{"@type":"ImageObject","url":"https://stuffthatspins.com/images/logo.png"},"sameAs":[]},{"@type":"NewsArticle","@id":"https://stuffthatspins.com/spin/fakegit-campaign-uses-7600-github-repos-to-push-smartloader-malware#article","headline":"FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware","description":"A large-scale operation dubbed 'FakeGit' is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories that accumulated more than 14 mi…","datePublished":"2026-07-21T22:34:17+00:00","dateModified":"2026-07-22T00:04:47.173897+00:00","url":"https://stuffthatspins.com/spin/fakegit-campaign-uses-7600-github-repos-to-push-smartloader-malware","mainEntityOfPage":{"@type":"WebPage","@id":"https://stuffthatspins.com/spin/fakegit-campaign-uses-7600-github-repos-to-push-smartloader-malware"},"isAccessibleForFree":true,"inLanguage":"en-US","articleSection":"cybersecurity","author":{"@type":"Organization","name":"BleepingComputer","url":"https://www.bleepingcomputer.com/feed/"},"publisher":{"@id":"https://stuffthatspins.com/#organization"},"citation":"https://www.bleepingcomputer.com/news/security/fakegit-campaign-uses-7-600-github-repos-to-push-smartloader-malware/","about":[],"mentions":[{"@type":"Organization","name":"BleepingComputer"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Stuff That Spins","item":"https://stuffthatspins.com/"},{"@type":"ListItem","position":2,"name":"FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware","item":"https://stuffthatspins.com/spin/fakegit-campaign-uses-7600-github-repos-to-push-smartloader-malware"}]}]}
---

# FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware

**Source:** Unknown  
**Published:** July 21, 2026  
**Original:** https://www.bleepingcomputer.com/news/security/fakegit-campaign-uses-7-600-github-repos-to-push-smartloader-malware/  

## On this page

- [Overview](#overview)

<a id="overview"></a>

## Overview

A large-scale operation dubbed 'FakeGit' is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories that accumulated more than 14 million downloads. [...]

---
*HTML version: https://stuffthatspins.com/spin/fakegit-campaign-uses-7600-github-repos-to-push-smartloader-malware*