12 min read
The Fake Font Was After Your Agent's Keys
A fake-font credential stealer landed in 12,137 GitHub repos between October 14 and 16, about 130 times the cluster in the only write-up so far. It goes straight for Claude Code, Gemini and OpenAI credentials. We found malware in nine forks of REA.