MoltBot Skills exploited to distribute 400+ malware packages in days

Over 400 malicious OpenClaw (formerly MoltBot/ClawdBot) skills were published on ClawHub and GitHub between late January and early February 2026, masquerading as cryptocurrency trading tools to trick users into running commands that installed information‑stealing malware on Windows and macOS. The campaign—dominated by a single uploader and reusing a common C2 infrastructure—exploited weak registry review and social engineering, constituting a supply-chain style attack against the emerging AI skills ecosystem and targeting crypto traders for financial gain.