Public story · 2026-03-04 · source-backed

OpenClaw Supply Chain Crisis Escalates

Issue

2026-03-04

Confidence

source-backed

Sources

Redaction

passed

Story

824+ confirmed malicious skills across 10,700+ total in ClawHub (~8% of registry). Primary payload: Atomic macOS Stealer. 30,000+ publicly exposed instances; Censys tracked growth from ~1,000 to 21,000+ in a single week. Agent skills supply chain remains the most active attack surface. (eSecurity Planet)

OpenClaw released ClawHub / Shared entities / Same source / Shared topic / What happened next
OpenClaw Malicious Skills Surge to 820 — 7.7% of ClawHub Is Compromised
Linked by a graph relationship (OpenClaw released ClawHub); both cover ClawHub, Planet; cite the same source (eSecurity Planet).
OpenClaw released ClawHub / Shared entities / Shared topic / What happened next
ClawHavoc Poisons ClawHub with 1,184 Malicious Skills: SKILL.md Poisoning Delivers macOS Stealer to 300,000+ Users
Linked by a graph relationship (OpenClaw released ClawHub); both cover ClawHub, Stealer; overlapping topics (agent, attack, chain, clawhub, skill).
OpenClaw released ClawHub / Shared entity: ClawHub / Shared topic / Earlier coverage
ClawHub Supply Chain Attack: 341 Malicious Skills
Linked by a graph relationship (OpenClaw released ClawHub); both cover ClawHub; overlapping topics (agent, atomic, attack, chain, clawhub).
Snyk criticizes ClawHub / Shared entity: ClawHub / Shared topic / What happened next
The Agent Security Crisis Is Here: 36% of ClawHub Skills Malicious, 30+ MCP CVEs, RCE in Microsoft Agent Framework
Linked by a graph relationship (Snyk criticizes ClawHub); both cover ClawHub; overlapping topics (agent, attack, chain, clawhub, skill).
Snyk criticizes ClawHub / Shared entity: ClawHub / Shared topic / Earlier coverage
Snyk ToxicSkills: 13.4% of Agent Skills Are Critically Vulnerable
Linked by a graph relationship (Snyk criticizes ClawHub); both cover ClawHub; overlapping topics (agent, clawhub, confirmed, skill).
Censys benchmarked against MCP / Shared entity: Agent / Shared topic / What happened next
CrowdStrike Names the Three Ways Your MCP Server Will Get Owned
Linked by a graph relationship (Censys benchmarked against MCP); both cover Agent; overlapping topics (agent, attack, chain, supply).
OpenClaw released ClawHub / Shared entity: Agent / What happened next
Y Combinator open-sources QM, the harness running its company
Linked by a graph relationship (OpenClaw released ClawHub); both cover Agent; picks up the Agent thread on 2026-08-03.
Snyk criticizes ClawHub / Shared entity: Agent / What happened next
Three vendors in three unrelated categories shipped agents that supervise other agents inside two weeks.
Linked by a graph relationship (Snyk criticizes ClawHub); both cover Agent; picks up the Agent thread on 2026-07-10.

Source trail

eSecurity Planet

Entities

Agent Atomic Censys ClawHub OpenClaw Supply Chain Crisis Escalates Planet Primary Stealer

Provenance

Canonical issue: Ramsay Research Agent — 2026-03-04
AI generated: no
Story unit: 2026-03-04-openclaw-supply-chain-crisis-escalates
Labels: source-backed, canonical briefing excerpt

Fetching from the wire…

OpenClaw Supply Chain Crisis Escalates

Story

Related stories

OpenClaw Malicious Skills Surge to 820 — 7.7% of ClawHub Is Compromised

ClawHavoc Poisons ClawHub with 1,184 Malicious Skills: SKILL.md Poisoning Delivers macOS Stealer to 300,000+ Users

ClawHub Supply Chain Attack: 341 Malicious Skills

The Agent Security Crisis Is Here: 36% of ClawHub Skills Malicious, 30+ MCP CVEs, RCE in Microsoft Agent Framework

Snyk ToxicSkills: 13.4% of Agent Skills Are Critically Vulnerable

CrowdStrike Names the Three Ways Your MCP Server Will Get Owned

Y Combinator open-sources QM, the harness running its company

Three vendors in three unrelated categories shipped agents that supervise other agents inside two weeks.

Source trail

Entities

Provenance

OpenClaw Supply Chain Crisis Escalates

Story

Related stories

OpenClaw Malicious Skills Surge to 820 — 7.7% of ClawHub Is Compromised

ClawHavoc Poisons ClawHub with 1,184 Malicious Skills: SKILL.md Poisoning Delivers macOS Stealer to 300,000+ Users

ClawHub Supply Chain Attack: 341 Malicious Skills

The Agent Security Crisis Is Here: 36% of ClawHub Skills Malicious, 30+ MCP CVEs, RCE in Microsoft Agent Framework

Snyk ToxicSkills: 13.4% of Agent Skills Are Critically Vulnerable

CrowdStrike Names the Three Ways Your MCP Server Will Get Owned

Y Combinator open-sources QM, the harness running its company

Three vendors in three unrelated categories shipped agents that supervise other agents inside two weeks.

Source trail

Entities

Provenance