Threats I hunted
AgentBaiting
The largest documented list of malicious AI skills and MCP servers — planted where coding agents look, so the assistants themselves would hand malware to developers.
- ~1,000
- malicious skills & MCP servers · the largest documented list
- 7,600
- malicious GitHub repos in the wider operation
- 14M+
- downloads mapped
The newest supply chain doesn’t target people — it targets the agents people trust. We found an operation seeding GitHub with fake skills and MCP servers, tuned to be recommended by AI assistants.
We mapped almost a thousand of them — the largest documented list to date — along with the thousands of repos and identities behind the wider operation, and showed the major assistants confidently serving them up.
In the press
VideoJohn Hammond
AI Might Give You MalwareSubdoMailing & EchoSpoofing