---
id: "CMP-202610-fake-solana-starter-kit-on-github-solanaupdatetools-solana-s"
kind: "campaign"
aliases: []
title: "Fake Solana starter kit on GitHub (SolanaUpdateTools/solana-starter-kit) tricks AI coding agents into running a PowerShell one-liner that installs NetSupport RAT"
severity: "high"
cvss: null
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "GitHub", "fixed": [], "ecosystem": "other"}, {"name": "Cursor", "fixed": [], "ecosystem": "other"}, {"name": "Claude Code", "fixed": [], "ecosystem": "other"}, {"name": "GitHub Copilot", "fixed": [], "ecosystem": "other"}, {"name": "Solana", "fixed": [], "ecosystem": "other"}]
ecosystems: []
tags: ["ai-coding-agents", "campaign", "early-warning", "github", "netsupport-rat", "solana"]
not_affected_if: []
published_at: null
first_seen_at: "2026-10-29T22:30:11+00:00"
updated_at: "2026-10-29T22:30:11+00:00"
sources: [{"source": "analyst", "url": null, "first_seen_at": "2026-10-29T22:30:11+00:00"}]
---

# Fake Solana starter kit on GitHub (SolanaUpdateTools/solana-starter-kit) tricks AI coding agents into running a PowerShell one-liner that installs NetSupport RAT

Air Security reports a GitHub repo, SolanaUpdateTools/solana-starter-kit (created November 2025, 286 stars), that ranks as the top result when AI coding agents search for a Solana starter kit. The README is the only file; its only 'installation' step is a Windows PowerShell one-liner that assembles a URL on developer-update[.]app from fragments and fetches and runs a script in memory. The payload (confirmed by BleepingComputer from the Wayback Machine) installs NetSupport Manager configured to connect to maxwintodaybtc[.]com with persistence at every login, then shows a fake error ('developer functionality is temporarily paused due to load... try again in 72 hours') that an agent may relay as a routine hiccup. An agent following the README can run it without the developer seeing it. Linked to a known NetSupport RAT operator tracked by eSentire and an earlier fake TradingView 'AI signal' campaign. Payload URL returned 404 when Air checked; repo still live on Oct 29, 2026. Confirmed victims: unknown. At risk: Windows developers letting Cursor, Claude Code, Copilot, Codex or similar agents run shell commands from READMEs, especially for crypto/Solana projects.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- other:GitHub affected ? fixed ?
- other:Cursor affected ? fixed ?
- other:Claude Code affected ? fixed ?
- other:GitHub Copilot affected ? fixed ?
- other:Solana affected ? fixed ?

## How to check

Search agent session logs, shell/PowerShell history (PSReadLine ConsoleHost_history.txt) and proxy/DNS logs for SolanaUpdateTools/solana-starter-kit, developer-update[.]app and maxwintodaybtc[.]com. On Windows look for an unexpected NetSupport Manager client (client32.exe / client32.ini) and new Run keys or startup entries that launch it.

## Fix

If any of the indicators match, isolate the machine, remove NetSupport, and rotate credentials and crypto wallet keys that were on it. Block developer-update[.]app and maxwintodaybtc[.]com. Require human approval before coding agents run shell commands, especially piped download-and-execute one-liners from READMEs, and do not let agents pick starter templates from search results without review.

## Timeline

- 2026-10-29T22:30:11+00:00 analyst

## Documents

- [describes] BleepingComputer: Hugging Face malware campaign returns to hijack GPUs for crypto mining https://www.bleepingcomputer.com/news/security/hugging-face-malware-campaign-returns-to-hijack-gpus-for-crypto-mining/

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_