zenity.ioPublished
Attackers Target Agents via The Skill Supply Chain
Excerpt
Attackers Target Agents via The Skill Supply Chain | Zenity Labs
By Michael Bargury
Attackers Target Agents via The Skill Supply Chain
An active malware campaign used typosquatted skills, trojanized packages, and remote loaders to target users of popular AI tools.
TL;DR
We disrupted an active malware campaign targeting agents through typosquatted skills. It targets users of popular AI tools Paperclip and Browser Use. The Paperclip skill family began accumulating skills.sh installs while they were still clean. The skilled were trojanized on July 11 and were trending throughout July. By August 2, skills.sh amassed more than 1.7M aggregate install…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by zenity.io on labs.zenity.io.
On the same topics
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Trust the Tunnel, Get the Trojan: Silver Fox Delivers Atlas RAT via Weaponized VPN Installershexastrike.com · Published 25 Mar
- Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent TrafficThe Hacker News · Published 19 Oct
- Gaslight's prompt injection against malware analysisrogue.security · Published 29 Jun
