Fetching from the wire…
Top 5 · 2026-03-12 · source-backed
Koi Security found 820+ malicious skills on ClawHub (up from 335 in ClawHavoc days ago). Skills use professional docs and innocent names like "solana-wallet-tracker" then install keyloggers (Windows) or Atomic Stealer (macOS). Loaded skills inherit OpenClaw's full system permissions. Snyk found 36% of all ClawHub skills contain detectable prompt injection. ClawHub is now the most compromised package registry in AI. The supply chain attack is accelerating faster than defenses. eSecurity Planet
Each link below shares sources, entities, or timing with this story.
Snyk criticizes ClawHub / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Snyk criticizes ClawHub); both cover ClawHavoc, ClawHub, OpenClaw; overlapping topics (attack, chain, clawhavoc, clawhub, maliciou).
Snyk criticizes ClawHub / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Snyk criticizes ClawHub); both cover Atomic Stealer, ClawHub, OpenClaw, Snyk; overlapping topics (atomic, attack, chain, clawhub, maliciou).
Snyk criticizes ClawHub / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Snyk criticizes ClawHub); both cover ClawHavoc, ClawHub, Skills; overlapping topics (maliciou, skill).
Snyk criticizes ClawHub / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Snyk criticizes ClawHub); both cover ClawHub, Planet; cite the same source (eSecurity Planet).
Snyk criticizes ClawHub / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Snyk criticizes ClawHub); both cover ClawHub, Snyk; overlapping topics (attack, chain, clawhub, skill).
Snyk partners with Anthropic / Shared entity: ClawHub / Shared topic / What happened next
Linked by a graph relationship (Snyk partners with Anthropic); both cover ClawHub; overlapping topics (attack, chain, clawhub, compromised, skill).
Snyk criticizes ClawHub / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Snyk criticizes ClawHub); both cover OpenClaw, Snyk; overlapping topics (attack, chain).
Snyk criticizes ClawHub / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Snyk criticizes ClawHub); both cover ClawHub, Snyk; overlapping topics (clawhub, found, maliciou, skill).