ClawHavoc: 824+ Malicious Skills Found in ClawHub Marketplace Supply Chain Crisis

Koi Security audit found 341 malicious skills in ClawHub (335 distributing Atomic Stealer macOS malware). Number grew to 824+ across 10,700+ skills. Skills exfiltrate credentials, open reverse shells, hijack WebSocket sessions. VirusTotal partnership announced Feb 2026 as response.

Product Idea from this Signal

A runtime middleware that intercepts OpenClaw skill installs, sandboxes execution in an isolated environment, and blocks skills exhibiting credential exfiltration or reverse shell behavior

345 ▲

824+ malicious skills were found in ClawHub distributing Atomic Stealer malware, exfiltrating credentials from ~/.clawdbot/.env, and opening reverse shells. VirusTotal scanning catches known signatures but misses zero-day behavior. Four chained CVEs (Claw Chain) showed sandbox escapes via TOCTOU race conditions. This middleware sits between ClawHub install and execution, running each skill in a throwaway container, monitoring syscalls and network egress, and blocking anything that touches credential files or opens outbound connections to unknown hosts.

RUNTIME-MIDDLEWARESECURITYOPEN-SOURCEDEVTOOLCONTAINER

CompetitiveView Opportunity →