Malicious MoltBot skills used to push password-stealing malware

Researchers found 230–341 malicious OpenClaw skills published on the official registry and GitHub that impersonate legitimate plugins but instruct users to run a malicious 'AuthTool' which installs info-stealing malware (including a NovaStealer variant). The campaign targets cryptocurrency-related secrets, browser and system credentials across macOS and Windows, uses techniques to bypass macOS Gatekeeper, and exploits misconfigured exposed admin interfaces; users are advised to isolate the assistant, restrict permissions, and verify skill safety before deployment.