Researchers Find 341 Malicious ClawHub Skills Stealing Data from OpenClaw Users

Published: 6 days ago (February 2, 2026 at 12:49 PM EST)

1 min read

Source: The Hacker News

Summary

A security audit of 2,857 skills on ClawHub has found 341 malicious skills across multiple campaigns, according to new findings from Koi Security, exposing users to new supply chain risks. ClawHub is a marketplace designed to make it easy for OpenClaw users to find and install third-party skills. It…

Back to Blog

Malicious MoltBot skills used to push password-stealing malware

More than 230 malicious packages for the personal AI assistant OpenClaw formerly known as Moltbot and ClawdBot have been published in less than a week on the to...

Russian hackers exploit recently patched Microsoft Office bug in attacks

Ukraine's Computer Emergency Response Team CERT says that Russian hackers are exploiting CVE-2026-21509, a recently patched vulnerability in multiple versions o...

Notepad++ updates got hijacked for months and could have spied for China

Users of the text and code editor Notepad++ may have unknowingly downloaded a malicious update for the app after its shared hosting servers were hijacked last y...

Security Bite Podcast: It’s all about infostealers

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do...

Summary

Related posts

Malicious MoltBot skills used to push password-stealing malware

Russian hackers exploit recently patched Microsoft Office bug in attacks

Notepad++ updates got hijacked for months and could have spied for China

Security Bite Podcast: It’s all about infostealers