The skills.sh Credential Theft Campaign: What to Check on Your Machine Right Now
Zenity Labs disclosed a typosquatting campaign on Vercel's skills.sh AI agent skill registry that stole SSH keys and cloud credentials, with one skill family reaching 1.7 million installs. Here's w...



