Attackers exploit AI skills registry for credential theft

Researchers at Zenity Labs discovered a campaign on skills.sh, a Vercel-hosted registry for AI skills.