ITG NowHome › AI glossary › Typosquatting
What is Typosquatting?
Typosquatting is when someone makes a fake repo, package or website with a name almost the same as a real one.
- Category Safety & law
- Also called lookalike repo, fake repo
- Updated 20 Oct 2026
Typosquatting, explained simply
Typosquatting uses a name that is one letter off. A real tool might be named one thing, and the fake swaps or adds a letter.
People who mistype or click fast may get the fake. It can hold harmful code or steal data.
To stay safe, copy names from the official page, check the owner and look at how long the project has existed.
On ITG Now, our free tool guides name the exact owner and repo so you can match it before you install.
Related terms
Fake GitHub starsMalwareSupply chain attackPackage managerGitHubRepo
Questions people ask about Typosquatting
How do I spot a fake repo?
Check the owner's name, the project's history and the link from its official site. Be wary if it is brand new with many stars.
Does typosquatting only happen on GitHub?
No. It also happens with packages, apps and websites.
What should I do if I installed a fake?
Remove it, change any passwords you used on that device and run a security scan. Ask a trusted person if unsure.