Fake repositories may claim to offer "enhanced" Yape features but instead contain Node.js stealers or Remote Administration Trojans (RATs) that harvest crypto wallet data and browser history. How to Protect Yourself
In early 2025, cybersecurity researchers at identified over 200 fraudulent GitHub repositories impersonating Yape and similar fintech apps (like Nequi and Mercado Pago). One particular repository, yape-auto , was cloned over 1,500 times before being reported. Victims reported losing anywhere from 50 to 3,000 soles ($13 to $800 USD) via unauthorized transfers. yape fake github
Scammers use bot accounts to "star" these fake repositories, making them appear trustworthy to unsuspecting users looking for payment tools. Fake repositories may claim to offer "enhanced" Yape
More sophisticated fake repositories don't ask for passwords. Instead, they instruct users to run a script that extracts WhatsApp/Yape session tokens from local storage or memory. Once the attacker has the token, they can bypass 2FA and drain the linked bank account. Victims reported losing anywhere from 50 to 3,000
By following these guidelines, you can create and maintain a legitimate GitHub presence that showcases your projects and contributions in an authentic and professional manner.