Attackers Target Agents via The Skill Supply Chain

An active malware campaign used typosquatted skills, trojanized packages, and remote loaders to target users of popular AI tools.