Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-04 · source-backed
824+ confirmed malicious skills across 10,700+ total in ClawHub (~8% of registry). Primary payload: Atomic macOS Stealer. 30,000+ publicly exposed instances; Censys tracked growth from ~1,000 to 21,000+ in a single week. Agent skills supply chain remains the most active attack surface. (eSecurity Planet)
Each link below shares sources, entities, or timing with this story.
Koi Security found 820+ malicious skills on ClawHub (up from 335 in ClawHavoc days ago). Skills use professional docs and innocent names like "solana-wallet-tracker" then install keyloggers (Windows) or Atomic Stealer (macOS). Loaded skills inherit OpenClaw's full system permi...
The first real supply chain attack on the agent instruction layer landed this week, and it's worse than the early reports suggested. A campaign dubbed ClawHavoc planted 1,184 malicious skills in ClawHub — OpenClaw's official skill marketplace — by embedding adversarial instruc...
- Source: The Hacker News, Snyk - Category: deployment / security Koi Security audited 2,857 ClawHub skills: 341 malicious (12%), delivering Atomic Stealer malware targeting crypto wallets, SSH credentials, browser passwords across 9,000+ installations. Palo Alto Networks warn...
The agent skills supply chain is under coordinated attack. Snyk's ToxicSkills audit found 36% of ClawHub's 3,984 skills contain prompt injection payloads, 13.4% have critical malware, and submission rates exploded 10x to 500+/day. This week alone: CVE-2026-2256 (CVSS 9.1) is a...
Snyk scanned 3,984 agent skills from ClawHub/skills.sh: 534 (13.4%) critically vulnerable, 76 confirmed malicious. Publishing barrier: just a SKILL.md file and week-old GitHub account. Submissions jumped from 50/day to 500/day. Builder opportunity: The agent skills marketplace...
CrowdStrike published the first formal taxonomy of agentic tool chain attacks, naming three distinct classes that every builder running MCP servers needs to internalize: tool poisoning (injecting malicious instructions into tool descriptions that the agent reads and follows),...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.