{"id":"CMP-202610-fake-solana-starter-kit-on-github-solanaupdatetools-solana-s","kind":"campaign","aliases":[],"related":[],"title":"Fake Solana starter kit on GitHub (SolanaUpdateTools/solana-starter-kit) tricks AI coding agents into running a PowerShell one-liner that installs NetSupport RAT","description":null,"summary":"Air Security reports a GitHub repo, SolanaUpdateTools/solana-starter-kit (created November 2025, 286 stars), that ranks as the top result when AI coding agents search for a Solana starter kit. The README is the only file; its only 'installation' step is a Windows PowerShell one-liner that assembles a URL on developer-update[.]app from fragments and fetches and runs a script in memory. The payload (confirmed by BleepingComputer from the Wayback Machine) installs NetSupport Manager configured to connect to maxwintodaybtc[.]com with persistence at every login, then shows a fake error ('developer functionality is temporarily paused due to load... try again in 72 hours') that an agent may relay as a routine hiccup. An agent following the README can run it without the developer seeing it. Linked to a known NetSupport RAT operator tracked by eSentire and an earlier fake TradingView 'AI signal' campaign. Payload URL returned 404 when Air checked; repo still live on Oct 29, 2026. Confirmed victims: unknown. At risk: Windows developers letting Cursor, Claude Code, Copilot, Codex or similar agents run shell commands from READMEs, especially for crypto/Solana projects.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"GitHub","fixed":[],"ecosystem":"other"},{"name":"Cursor","fixed":[],"ecosystem":"other"},{"name":"Claude Code","fixed":[],"ecosystem":"other"},{"name":"GitHub Copilot","fixed":[],"ecosystem":"other"},{"name":"Solana","fixed":[],"ecosystem":"other"}],"ecosystems":[],"tags":["ai-coding-agents","campaign","early-warning","github","netsupport-rat","solana"],"not_affected_if":[],"how_to_check":"Search agent session logs, shell/PowerShell history (PSReadLine ConsoleHost_history.txt) and proxy/DNS logs for SolanaUpdateTools/solana-starter-kit, developer-update[.]app and maxwintodaybtc[.]com. On Windows look for an unexpected NetSupport Manager client (client32.exe / client32.ini) and new Run keys or startup entries that launch it.","fix":"If any of the indicators match, isolate the machine, remove NetSupport, and rotate credentials and crypto wallet keys that were on it. Block developer-update[.]app and maxwintodaybtc[.]com. Require human approval before coding agents run shell commands, especially piped download-and-execute one-liners from READMEs, and do not let agents pick starter templates from search results without review.","status":"open","published_at":null,"first_seen_at":"2026-10-29T22:30:11+00:00","triaged_at":"2026-10-29T22:30:11+00:00","updated_at":"2026-10-29T22:30:11+00:00","category":"ai-tooling","confidence":null,"triage":null,"analyst_status":"done","analyst_note":null,"search":"'-202610':24A '2025':64B '2026':213B '286':65B '29':212B '404':203B '72':158B 'agent':11A,45B,76B,162B,170B,229B 'ai':9A,43B,74B,197B 'ai-coding-ag':42B 'air':55B,205B 'app':108B 'assembl':101B 'bleepingcomput':123B 'campaign':46B,199B 'check':206B 'claud':223B 'claude':37A 'cmp':23A 'code':10A,38A,44B,75B,224B 'codex':226B 'com':136B 'command':232B 'configur':131B 'confirm':121B,214B 'connect':133B 'copilot':40A,225B 'creat':62B 'crypto/solana':237B 'cursor':36A,222B 'develop':106B,147B,179B,220B 'developer-upd':105B 'due':152B 'earli':48B 'earlier':194B 'early-warn':47B 'error':146B 'esentir':191B 'especi':235B 'everi':140B 'fake':1A,26A,145B,195B 'fake-solana-starter-kit-on-github-solanaupdatetools-solana-s':25A 'fetch':112B 'file':88B 'follow':171B 'fragment':110B 'function':148B 'github':6A,31A,35A,39A,50B,59B 'hiccup':168B 'hour':159B 'instal':20A,91B,128B 'kit':4A,29A,82B 'known':185B 'let':221B 'liner':18A,99B 'link':182B 'live':209B 'load':154B 'login':141B 'machin':127B 'manag':130B 'maxwintodaybtc':135B 'may':163B 'memori':118B 'netsupport':21A,52B,129B,186B 'netsupport-rat':51B 'novemb':63B 'oct':211B 'on':30A 'one':17A,98B 'one-lin':16A,97B 'oper':188B 'paus':151B 'payload':120B,200B 'persist':138B 'powershel':15A,96B 'project':238B 'rank':68B 'rat':22A,53B,187B 'readm':84B,173B,234B 'relay':164B 'repo':60B,207B 'report':57B 'result':72B 'return':202B 'risk':218B 'routin':167B 'run':13A,114B,175B,230B 's':34A 'script':116B 'search':77B 'secur':56B 'see':180B 'shell':231B 'show':143B 'signal':198B 'similar':228B 'solana':2A,27A,33A,41A,54B,80B 'solanaupdatetools':32A 'solanaupdatetools/solana-starter-kit':7A,61B 'star':66B 'starter':3A,28A,81B 'step':92B 'still':208B 'temporarili':150B 'top':71B 'track':189B 'tradingview':196B 'tri':155B 'trick':8A 'unknown':216B 'updat':107B 'url':103B,201B 'victim':215B 'warn':49B 'wayback':126B 'window':95B,219B 'without':177B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"first_public_at":"2026-10-29T22:09:24+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"analyst","external_id":"CMP-202610-fake-solana-starter-kit-on-github-solanaupdatetools-solana-s","url":null,"severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-29T22:30:11+00:00","fetched_at":"2026-10-29T22:30:11+00:00","note":null}],"documents":[{"id":19691,"url":"https://www.bleepingcomputer.com/news/security/hugging-face-malware-campaign-returns-to-hijack-gpus-for-crypto-mining/","title":"BleepingComputer: Hugging Face malware campaign returns to hijack GPUs for crypto mining","kind":"blog","source":"blog","publisher":null,"text":"Hugging Face malware campaign returns to hijack GPUs for crypto mining\n\nA crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana starter kit on GitHub is positioned to trick AI coding agents into installing a NetSupport RAT. [...]","published_at":"2026-10-29T22:09:24+00:00","relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}