ClawHavoc Poisoned OpenClaw’s ClawHub with 1,184 Malicious Skills, Enabling Data Theft and Backdoor Access

The ClawHavoc campaign poisoned OpenClaw’s official marketplace, ClawHub, by distributing 1,184 malicious Skills designed to steal data and enable backdoor access. This attack exploited the platform’s permissive upload model, leading to potential system compromises through trojanized tools disguised as legitimate software.