ClawHub Market Infected with 1,184 Malicious Skills Targeting SSH Keys and Crypto Wallets

According to Awesome Agents, security researchers have discovered a severe supply chain attack on OpenClaw’s ClawHub plugin marketplace, with 1,184 malicious skills identified. These malicious skills are capable of stealing SSH keys, cryptocurrency wallets, browser passwords, and enabling reverse shells. Research shows that a single attacker uploaded 677 malicious packages, accounting for 57% of all malicious listings. Of all skills on ClawHub, 36.8% contain at least one security vulnerability, and over 135,000 exposed OpenClaw instances have been detected across 82 countries worldwide. The most popular malicious skill, "What Would Elon Do," was found to contain nine vulnerabilities, two of which are classified as critical. This skill achieved the top ranking through 4,000 fake downloads. These malicious skills primarily exploit "ClickFix" social engineering techniques and prompt injection attacks to target both users and AI agents simultaneously. OpenClaw has partnered with VirusTotal to scan all skills and remove malicious listings. Security experts recommend that users who have used ClawHub skills change all credentials, revoke API keys, and review their security settings.