Security Advisory: OpenClaw Official Plugin Center ClawHub Targeted in Large-Scale Malicious Skill Poisoning Campaign
BlockBeats News, February 9th, SlowMist issued a security advisory. Recently, the open-source artificial intelligence agent project OpenClaw unexpectedly gained popularity. Its official plugin center, ClawHub, is gradually becoming a new target for supply chain poisoning attacks, posing a potential security risk to developers and users. Monitoring shows that 341 malicious skills have been identified, which usually masquerade as cryptocurrency assets, security checks, or automation tools.
Attackers use the SKILL.md file as the entry point for execution instructions, hiding malicious commands through Base64 encoding and employing a two-stage loading mechanism to evade detection. The first stage retrieves the payload via curl, and the second stage deploys a sample named dyrtvwjfveyxjf23, deceiving users into entering their system password and stealing local documents and system information. Users are advised to review any command requiring execution, be cautious of prompts to obtain system privileges, and always prefer obtaining tools through official channels.
You may also like

Champion's Final Bow: FC Barcelona vs Real Betis – Celebrate the Title with a Home Finale

Best Oil Trading Platform for Crypto Users in 2026
5 Futures Trading Strategies Smart Traders Use to Cut Crypto Fees and Boost Futures Returns

What Is TradFi? How Crypto Traders Can Now Access Crude Oil, Gold, and Global Markets

How WEEX Bridges Crypto and Football: A Deep Look at the LALIGA Partnership Inside the WEEX App
WEEX is not just a LALIGA sponsor. It’s a true partner. From iPhone Dynamic Island to LALIGA-themed app icons and smart posters, see how WEEX brings football passion into every trade — and builds a real bridge between crypto and sports.

FC Barcelona vs Real Madrid Preview: El Clásico – Can Barça Clinch the Title at Spotify Camp Nou?
FC Barcelona vs Real Madrid El Clásico match preview for May 11, 2026. Barça need just 1 point to win LALIGA. Can Madrid delay the trophy? Full preview inside.

At the Stripe conference, I saw the future of the AI economy

Miners welcome a new life

Seven Important Judgments by Claude Code's Founder at the Sequoia Conference

The payment moment of AI agents: Who will become the Stripe of the machine economy?

Morning Report | MoonPay acquires Solana's execution layer DFlow; Strategy releases Q1 financial report; Manta Network announces the termination of Manta staking program

Rented Tracks: What is this wave of stablecoin FX hot money really paying for?

Dialogue Velocity Eric: What is the stablecoin track that the CFO really wants?

Strategy should have said that selling coins is not ruled out

How MegaETH Achieved a TVL of 700m Within a Week of TGE? Analyzing the Packaging Strategy

Futures Trading Hours: Trade Cryptocurrency 24/7 and Earn Back Up to 45% in Trading Fees
Learn futures trading hours and the best time to trade crypto futures. Discover 24/7 market insights, peak trading sessions, and how to earn back up to 45% in fees.

Why is a16z Crypto raising another $2.2 billion to heavily invest in Web3?

Polymarket Underlying Algorithm Explained
Champion's Final Bow: FC Barcelona vs Real Betis – Celebrate the Title with a Home Finale
Best Oil Trading Platform for Crypto Users in 2026
5 Futures Trading Strategies Smart Traders Use to Cut Crypto Fees and Boost Futures Returns
What Is TradFi? How Crypto Traders Can Now Access Crude Oil, Gold, and Global Markets
How WEEX Bridges Crypto and Football: A Deep Look at the LALIGA Partnership Inside the WEEX App
WEEX is not just a LALIGA sponsor. It’s a true partner. From iPhone Dynamic Island to LALIGA-themed app icons and smart posters, see how WEEX brings football passion into every trade — and builds a real bridge between crypto and sports.
FC Barcelona vs Real Madrid Preview: El Clásico – Can Barça Clinch the Title at Spotify Camp Nou?
FC Barcelona vs Real Madrid El Clásico match preview for May 11, 2026. Barça need just 1 point to win LALIGA. Can Madrid delay the trophy? Full preview inside.
