Fake Solana Starter Kit on GitHub Tricked AI Coding Agents with Malware

According to AIR Research Lab, a fake Solana starter kit repository on GitHub ranked first when searched by AI coding agents and distributed malicious NetSupport Manager files. In a demonstration, Claude Code selected the repository and executed a PowerShell command that installed remote access malware, allowing operators to take control of Windows PCs. The repository, which had collected 286 stars since November 2025, has since been removed from GitHub. Open article →