OpenClaw Becomes New Target in Rising Wave of Supply Chain Poisoning Attacks

OpenClaw's ClawHub skill marketplace is being abused in a supply‑chain campaign (ClawHavoc) where malicious SKILL.md prerequisites contain Base64‑encoded commands that execute curl|bash droppers; these fetch two‑stage payloads and macOS infostealers (Atomic/AMOS) that exfiltrate documents and credentials. Security firms Koi Security and SlowMist identified hundreds of compromised skills, detailed TTPs (obfuscated prerequisites, two‑stage downloads, phishing dialogs), and provided extensive IOCs (domains, IPs, URLs, and SHA256 file hashes) for detection and remediation.