More Malicious OpenClaw Skills Threaten AI Supply Chain
Summary
OpenClaw, an AI skills marketplace called ClawHub, discovered and removed five malicious packages that had bypassed security checks despite containing infostealers (malware that steals information like passwords and data). This incident demonstrates that threats can slip through marketplace defenses and compromise the AI supply chain (the network of tools and components used to build AI systems).
Classification
Affected Vendors
Related Issues
Original source: https://www.darkreading.com/cyber-risk/malicious-openclaw-skills-clawhub-threaten-ai-supply-chain
First tracked: June 24, 2026 at 08:01 PM
Classified by LLM (prompt v3) · confidence: 85%