Fetching from the wire…
Top 5 · 2026-03-12 · source-backed
Koi Security found 820+ malicious skills on ClawHub (up from 335 in ClawHavoc days ago). Skills use professional docs and innocent names like "solana-wallet-tracker" then install keyloggers (Windows) or Atomic Stealer (macOS). Loaded skills inherit OpenClaw's full system permissions. Snyk found 36% of all ClawHub skills contain detectable prompt injection. ClawHub is now the most compromised package registry in AI. The supply chain attack is accelerating faster than defenses. eSecurity Planet
Each link below shares sources, entities, or timing with this story.
OpenClaw supports Discord / Shared entities / Shared topic / What happened next
Linked by a graph relationship (OpenClaw supports Discord); both cover ClawHavoc, ClawHub, OpenClaw; overlapping topics (attack, chain, clawhavoc, clawhub, maliciou).
OpenClaw released ClawHub / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (OpenClaw released ClawHub); both cover Atomic Stealer, ClawHub, OpenClaw, Snyk; overlapping topics (atomic, attack, chain, clawhub, maliciou).
OpenClaw released ClawHub / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (OpenClaw released ClawHub); both cover ClawHavoc, ClawHub, Skills; overlapping topics (maliciou, skill).
OpenClaw released ClawHub / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (OpenClaw released ClawHub); both cover ClawHub, Planet; cite the same source (eSecurity Planet).
Microsoft released OpenClaw / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft released OpenClaw); both cover ClawHub, Snyk; overlapping topics (attack, chain, clawhub, skill).
OpenClaw released ClawHub / Shared entity: ClawHub / Shared topic / What happened next
Linked by a graph relationship (OpenClaw released ClawHub); both cover ClawHub; overlapping topics (attack, chain, clawhub, compromised, skill).
OpenClaw released ClawHub / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (OpenClaw released ClawHub); both cover OpenClaw, Snyk; overlapping topics (attack, chain).
OpenClaw released ClawHub / Shared entities / Shared topic / What happened next
Linked by a graph relationship (OpenClaw released ClawHub); both cover ClawHub, Snyk; overlapping topics (clawhub, found, maliciou, skill).