AI agents tricked into recommending malicious GitHub repositories
Island uncovered roughly 7,600 malicious GitHub repositories, more than 800 of them posing as AI Skills or Model Context Protocol (MCP) servers, in a wave that peaked in April 2026, with the fake repositories tied to abo…