OpenClaw plugin marketplace contains over 1,100 malicious skills capable of stealing SSH keys, cryptocurrency wallets, and browser passwords.

Deep Tide TechFlow News, February 20 — According to Awesome Agents, security researchers have discovered that OpenClaw’s ClawHub plugin marketplace has suffered a severe supply chain attack, with a total of 1,184 malicious skills confirmed. These malicious skills can steal SSH keys, cryptocurrency wallets, browser passwords, and initiate reverse shells.

Research shows that a single attacker uploaded 677 malicious packages, accounting for 57% of all malicious entries. On ClawHub, 36.8% of skills have at least one security vulnerability, and over 135,000 exposed OpenClaw instances have been identified across 82 countries worldwide.

The most popular malicious skill, “What Would Elon Do,” was found to contain nine vulnerabilities, two of which are critical. This skill ranked first with 4,000 fake downloads. These malicious skills mainly use “ClickFix” social engineering techniques and prompt injection attacks, targeting both users and AI agents.

OpenClaw has partnered with VirusTotal to scan all skills and remove malicious entries. Security experts recommend users who have used ClawHub skills to change all credentials, revoke API keys, and review security settings.