Security1 dSeptember 20, 2026, 09:52

Agent skill harvesting browser credentials had 60,000 GitHub stars

The author of an AI skills catalog discovered that a popular trend-finding tool secretly parsed Safari cookies, decrypted Chromium storage via macOS Keychain, and extracted authorization tokens. The skill was removed from the catalog despite having 60,000 stars on GitHub.

DEV Community Open source

Agent skill harvesting browser credentials had 60,000 GitHub stars

Skill disguised as a trend-finding tool
Scripts read Safari Cookies.binarycookies and Chromium databases
Cookie decryption performed via macOS Keychain
Session tokens extracted from cookies for account login

#Safari#Chrome#macOS#GitHub

CrowdSec confirms source code stolen in supply chain attack

Security

FBI: scammers impersonate police and demand payment under arrest threats

Security

Spain reports first end-to-end data breach carried out by an AI agent

Security

Agent skill harvesting browser credentials had 60,000 GitHub stars

CrowdSec confirms source code stolen in supply chain attack

FBI: scammers impersonate police and demand payment under arrest threats

Spain reports first end-to-end data breach carried out by an AI agent

Iranian hackers suspected in attack on Hyundai Glovis tanker off Texas