Placeholder Domains Used by 349 AI Agent Skills Found Redirecting to Scams

Summary

Manifold Security discovered that placeholder domains, present in 359,000 GitHub files and 349 AI agent skills, are being redirected to scam websites. This indicates a potential supply chain risk within AI development, where malicious actors could exploit these common placeholders to distribute fraudulent content or malware.

Indicators of Compromise

• malware — cloaked scam

Entities