Security researchers at Zenity Labs uncovered a credential-stealing campaign on skills. sh, a public registry of add-ons for AI agents run by Vercel. They unveiled the research at the Black Hat conference.
Source: [TNW](https://thenextweb.com/news/zenity-malicious-ai-skills-1-7m-installs-supply-chain-credential-theft)