AIR Research Lab reported on 29 October 2026 that a GitHub repository posing as a Solana starter kit was delivering malware through AI coding agents. AIR says the repository appeared first in a starter-kit search and instructed agents to execute a PowerShell command, giving attackers remote access to the developer’s Windows machine, including wallets stored there.[1]
The reported chain crosses from discovery into execution: an agent selects the repository, follows its README and downloads a script that executes in memory. AIR says the recovered dropper subsequently writes 13 legitimate, signed NetSupport Manager components and an attacker-controlled configuration file. That configuration directs the remote-access client to an attacker endpoint and disables user-facing controls. A Windows startup registry entry provides persistence. Signed components therefore form part of the reported malicious installation.[1]
AIR says the payload endpoint returned HTTP 404 during its investigation; researchers recovered the payload from the Web Archive. The report lists a hidden y2inwRnI6G directory under %LOCALAPPDATA%, a SecureModule startup entry, a client32.exe process running from that directory and outbound connections to the reported endpoint as compromise indicators. It recommends reviewing commands that download and execute remote code and avoiding automatic approval of installations from unchecked sources. It names no fixed agent release.[1]
[1]: AIR Research Lab, “SolanaCry: Malware in the wild steals crypto wallets from web-browsing AI agents,” 29 October 2026. https://www.air.security/blog-posts/solanacry
Sources
Check or correct this page
Verification record
The digest below shows whether the text you are reading matches the published source. It does not show that the reporting is correct. The build computes it from this page's Markdown source and lists it in the site manifest.
2d25029f73d4ed9c6232faa9341a2d0e6df536f5e679a7561494e06f9fe865c3
