Fake GitHub Repo Tricks AI Agents Into Installing SolanaCry Malware
Fake GitHub repo tricks AI agents into installing SolanaCry malware with NetSupport RAT on developers' Windows PCs.
Security researchers discovered SolanaCry, a malware delivered via a fake GitHub repository impersonating a Solana starter kit that targets AI coding agents. The malicious repo uses PowerShell commands to download and execute a dropper that installs legitimate NetSupport Manager components configured as remote-access malware, giving attackers control over developers' machines and potential access to cryptocurrency wallets. The campaign shows similarities to earlier ClickFix and cryptocurrency-targeting campaigns, highlighting how AI agents can be exploited as attack vectors.
AI summary of the linked source. Not reviewed by an editor. How this works
Run AIR Research Lab?
Get an email when a new story names AIR Research Lab, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAttackers created a convincing fake GitHub repository impersonating a legitimate Solana developer toolkit, tricking AI coding agents into executing malicious PowerShell commands that installed a disguised remote-access tool. This attack exploits a growing blind spot: AI agents can autonomously fetch, trust, and execute code from public repositories without the same skepticism a human developer might apply. The use of legitimate NetSupport Manager components further helped the malware evade detection by blending into expected software behavior. This matters because developers' machines often hold privileged credentials, API keys, and cryptocurrency wallet access, making them high-value targets with cascading impact beyond the initial compromise.
What helps against this
How we list vendors- Application allowlisting
Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- domain — maxwintodaybtc.com
- domain — developer-update.app
- malware — SolanaCry
- malware — NetSupport Manager (weaponized)
- malware — indicator.ps1