The skimming device, which lifts information from credit and debit cards, was attached to a MetroCard vending machine on the north end of the southbound platform on the No. 1 line, officials said. It was found Wednesday night by a rider who removed it from the machine and alerted a token booth clerk.