ClawHub Scope Squatting Lets Plugins Masquerade as Official OpenClaw Integrations

Manifold discovered a scope‑squatting weakness in ClawHub’s plugin registry that permitted third‑party publishers to register code‑executing plugins under official organizational scopes (such as @openclaw and @clawhub), creating a provenance‑based impersonation risk. Although no obviously malicious payloads were found in the reviewed packages, these plugins can execute sensitive actions inside agents (payments, host git/gh commands, egress to APIs), and ClawHub has since unlisted misleading plugins and implemented a namespace‑claim dispute process.