PLACEHOLDER THIRD-PARTY[.]COM REFERENCED ACROSS 1,700+ REPOSITORIES NOW SERVES MALICIOUS CONTENT

Summary from the TLDR InfoSec newsletter

Someone registered third-party[.]com, a non-IANA-reserved placeholder cited in 1,700+ GitHub repos, including AI agent skills and MCP docs, and it now serves a ClickFix PowerShell lure only to Windows visitors, while yoursite[.]com and your-domain[.]com push scams to macOS users that static scans miss.