Opening SecureFlowTyposquatted Agent Skills: Reputation Inflation, Rug Pull, and Credential Theft
Case summary & sources

AIDEFEND SecureFlow / SecureFlow Case Index

Zenity Labs aidefend-sf0032

Typosquatted Agent Skills: Reputation Inflation, Rug Pull, and Credential Theft

  • Autonomous Agents
  • AI Supply Chain
  • Credential & Identity Theft
  • Data Exfiltration

An active campaign created look-alike Paperclip and Browser Use projects. The Paperclip skill family appeared while its skill documents were clean, accumulated displayed installs, then received malicious setup instructions. A Browser Use lure instead installed a trojanized PyPI package. Both paths executed credential-stealing code that posted a base64-encoded plaintext bundle to the attacker's feedback endpoint.

Mapped threat techniques

  • AML.T0074 Masquerading
  • AML.T0111 AI Supply Chain Reputation Inflation
  • AML.T0109 AI Supply Chain Rug Pull
  • AML.T0110.000 AI Agent Tool Poisoning: Definition and Instructions
  • AML.T0011.002 User Execution: Poisoned AI Agent Tool
  • AML.T0050 Command and Scripting Interpreter
  • AML.T0055 Unsecured Credentials
  • AML.T0025 Exfiltration via Cyber Means

Source

Updated