Poisoning the well: AI supply chain attacks on Hugging Face and OpenClaw

**Executive Summary:** Acronis TRU uncovered large-scale abuse of AI distribution ecosystems (OpenClaw/ClawHub and Hugging Face) where attackers publish trojanized skills, models and repositories to distribute malware — including AMOS infostealer, cryptominers and loaders — leveraging social engineering, indirect prompt injection, obfuscated binaries, in-memory execution and covert C2; investigators identified 575+ malicious OpenClaw skills across 13 developer accounts, documented active campaigns (ITHKRPAW, FAKESECURITY), provided numerous IOCs and recommended mitigations such as strict application control, monitoring and vetting of AI artifacts.