Evidence · DiggingBeagle record
FakeGit malicious ZIP enters AI skill directories beside SKILL.md
Primary or indexed evidence for Radar finding DB-RADAR-CP2-CP3-023. No proof ZIPs execute automatically when skills are installed.
- Source role
- primary disclosure
Evidence record
Primary or indexed evidence for Radar finding DB-RADAR-CP2-CP3-023. No proof ZIPs execute automatically when skills are installed.
Claim-level citations (3)
- supportsFakeGit malware lures were placed alongside AI skill definitions: Apiiro reports 17,610 live lure repositories and says 167 AI skill folders contained the campaign kit.
Opening metrics table and What is new here, AI skill folders
- supportsFakeGit malware lures were placed alongside AI skill definitions: The investigation identifies hundreds of apparently legitimate developer accounts among campaign-controlled repositories, but reports no verified count of automatic AI skill executions or resulting endpoint infections.
What is new here, developer-account takeover and prior work
- supportsFakeGit malware lures were placed alongside AI skill definitions: Apiiro found 1,169 AI-directory-listed lures and 167 malicious ZIPs co-located with SKILL.md; 96 of those 167 were directory-listed. Copying a ZIP with a skill was not shown to execute the malware.
The AI-developer angle, paragraphs on 1,169 listings and 167 skill folders