Large-scale malicious campaign targets GitHub with 7,600 repositories to distribute SmartLoader malware

Threat actors are utilizing a network of 7,600 GitHub repositories, including over 800 masquerading as AI and MCP server tools, to distribute SmartLoader malware. The campaign employs automated account creation and cloned project content to deceive developers, marking a significant escalation in supply chain poisoning tactics.