Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

2026-06-23T19:24:33Z9116521aecfe97cf5b130a27d29151ec56981554449ad3fe9e1959dea6e9bf6c
agentic-aiai-agent-securityandroid-developer-verificationcastlestealerdifytapexecutive-ordergithub-actionsgoogle-policy-change','canada-botnet-takedown','arystinger-roguegpt-5.5-cybermalicious-google-adsmanageengine-rmmmulti‑tenant-data-exposurenpm-malwareopenai-daybreakoxloaderpost-quantum-cryptographypwn-requestshapedpluginsoftware-supply-chainsquid-proxysquidbleedsupply-chain-attackwhatsapp-phishingwindows-ratwordpress-backdoor

What happened

A batch of security developments: a proof‑of‑concept fake AI agent skill bypassed multiple marketplace security scanners and reached ~26,000 agents (including corporate accounts), highlighting blind spots in agent/skill vetting; an executive order mandates U.S. federal migration to post‑quantum cryptography (key establishment by 2030, signatures by 2031); GitHub updated actions/checkout to block common pwn‑request attack patterns; malicious npm packages masquerading as PostCSS tools were used to deliver a Windows RAT; a WhatsApp VBScript campaign lures users to install ManageEngine RMM; OpenAI

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
9116521aecfe97cf5b130a27d29151ec56981554449ad3fe9e1959dea6e9bf6c
Enrichment time
2026-06-23T19:24:33Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.