GCVE-110-OSM-2026-14629

GitHub repository that provides the advertised functionality, typically cloned from a legitimate project, but also ships Windows malware. It includes a ZIP "installer" that, once run, starts a loader called SmartLoader, which usually drops the StealC infostealer. Part of a campaign that spreads malware through GitHub repositories imitating popular AI agent tools such as Claude skills, Codex tools, and MCP servers. Identified in research by SecurityBreak.io. ## Payload 1: committed ZIP installer Malicious payload found in: `claude-relay/instances/core-nox-2.4.zip` - Trigger: the victim downloads and runs the ZIP "installer" shipped in the repository (Windows users are told to click past the "Windows protected your PC" prompt). - Behavior: the ZIP contains a .bat or .cmd launcher, a LuaJIT runtime, and an obfuscated Lua script disguised as a .txt file. The launcher runs the Lua script with the bundled runtime (SmartLoader), which usually drops the StealC infostealer. - Repository status on 2026-11-04: live. - Only the committed ZIP path is documented for this repository; the ZIP contents were not individually analyzed in the source.