{"id":370913,"date":"2026-06-25T06:32:00","date_gmt":"2026-06-25T13:32:00","guid":{"rendered":"https:\/\/cms-articles.softonic.io\/en\/?p=370913"},"modified":"2026-06-25T06:32:47","modified_gmt":"2026-06-25T13:32:47","slug":"clawhub-caught-hosting-five-malicious-openclaw-skills-two-hit-macs","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/clawhub-caught-hosting-five-malicious-openclaw-skills-two-hit-macs\/","title":{"rendered":"ClawHub caught hosting five malicious OpenClaw skills: two hit Macs"},"content":{"rendered":"

In June 2026<\/strong>, Palo Alto Networks’ Unit 42 reported that ClawHub, the official marketplace for OpenClaw<\/a>, had exposed developers and other power users to a supply chain attack. OpenClaw launched in November 2025 as an open-source agent that can browse the web, manage files, and take actions on a user’s system. Unit 42 said ClawHub distributed five malicious OpenClaw skills, including two that installed Atomic macOS Stealer on Macs.<\/p>\n

\r\n
\r\n
\r\n
\r\n \"Malwarebytes\r\n <\/div>\r\n
\r\n Malwarebytes Anti-Malware<\/span>\r\n Download<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n\n\n

Unit 42 said two of those packages dropped Atomic macOS Stealer. One of them slipped past both<\/strong> VirusTotal<\/a> and ClawScan by padding its README beyond the scanners’ size limits. The researchers also said two other packages were built for commission fraud.<\/p>\n\n

They also found persistence and evasion<\/strong> techniques, which points to a broader problem in how sensitive skills are reviewed.<\/p>\n\n

Bitdefender Labs had already sounded the alarm in February 2026, warning that about 17%<\/strong> of the OpenClaw skills it analyzed showed malicious behavior. Bitdefender said many of those skills posed as utility tools, especially crypto-related ones, and used hidden commands to download malware or quietly tamper with transactions, affiliate links, and crypto activity.<\/p>\n\n

If you use OpenClaw regularly, take this seriously. The affected skills were published through ClawHub, OpenClaw’s official marketplace.<\/p>\n\n

According to Unit 42, OpenClaw has since removed the affected<\/strong> skills and banned the publishers. Security experts are still pushing for stricter publisher vetting, line-by-line audits for high-risk packages, and a formal review process so third-party skills don’t end up becoming shadow IT inside your company.<\/p>","protected":false},"excerpt":{"rendered":"

In June 2026, Palo Alto Networks’ Unit 42 reported that ClawHub, the official marketplace for OpenClaw, had exposed developers and other power users to a supply chain attack. OpenClaw launched in November 2025 as an open-source agent that can browse the web, manage files, and take actions on a user’s system. Unit 42 said ClawHub … Continue reading “ClawHub caught hosting five malicious OpenClaw skills: two hit Macs”<\/span><\/a><\/p>\n","protected":false},"author":9229,"featured_media":370912,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[],"usertag":[],"vertical":[],"content-category":[6771],"class_list":["post-370913","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","content-category-ai"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/370913","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9229"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=370913"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/370913\/revisions"}],"predecessor-version":[{"id":370914,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/370913\/revisions\/370914"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/370912"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=370913"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=370913"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=370913"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=370913"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=370913"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=370913"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}