Malware Found in OpenClaw Community Skills — Crypto Theft Alert
Malware Found in OpenClaw Community Skills — Crypto Theft Alert
A major scandal hit Reddit: malicious scripts stealing cryptocurrency were discovered in the Clawdbot/OpenClaw community skills repository. The post on r/webdev got 2,784 upvotes.
What Happened
- Malicious skills found in official community skills repo
- Scripts designed to steal cryptocurrency
- Project creator knew about the problem but "didn't know what to do"
Detailed Analysis
https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto
Community Reaction
r/webdev (2,784 upvotes):
- Criticism of "vibe coding" approach
- Discussion of maintainer responsibility
- Questions about AI agent security
r/theprimeagen (970 upvotes):
- "Senior Vibe Coder dealing with security"
r/ProgrammerHumor (1,360 upvotes):
- "seniorVibeCoderDealingWithVulnerabilityAsAService"
The Core Problem
AI agents have access to:
- File system
- Network
- API keys
- Potentially crypto wallets
Malicious skill can:
- Read private keys
- Send data to external servers
- Execute arbitrary code
Lessons for Users
- Audit every skill before installation
- Environment isolation — never on main machine
- No crypto keys on machine with agent
- Network monitoring
- Code review community contributions
Developer Response
After the scandal:
- Enhanced repo moderation
- Code review requirements
- Documentation warnings
Security is everyone's responsibility.
📖 Read the full source: Reddit
👀 See Also
Supply-chain attack uses invisible Unicode code to bypass detection
Researchers discovered 151 malicious packages uploaded to GitHub from March 3-9 using invisible Unicode characters to hide malicious code. The attack targets GitHub, NPM, and Open VSX repositories with packages that appear legitimate but contain hidden payloads.
Microsoft Hacked: Malware Planted in GitHub Repos Targets Claude and Gemini Users
Microsoft shut down 70+ GitHub repositories after hackers planted credential-stealing malware targeting AI coding agents like Claude Code and Gemini CLI.
Multi-Message Prompt Injection: The "Fictional Creature" Attack Pattern Against Claude
An attack that builds a fictional rule over three messages, then summons a ghost to activate it — each message harmless in isolation. The pattern is converging independently among attackers.
mcp-scan: Security scanner for MCP server configurations
mcp-scan checks MCP server configurations for security issues including secrets in config files, known vulnerabilities in packages, suspicious permission patterns, exfiltration vectors, and tool poisoning attacks. It auto-detects configs for Claude Desktop, Cursor, VS Code, Windsurf, and 6 other AI clients.