Malware in Agent Skills Repo Steals GitHub, AWS Credentials

A repository for "Agent skills that bring team coding standards to Claude Code and Codex" was recently compromised with malware, according to a report on Hacker News. A user warned that the repository was infected via commit 74f317d, which added five hidden files containing a large, obfuscated payload designed to steal developer credentials.