Malware Found in OpenClaw Community Skills — Crypto Theft Alert
Malware Found in OpenClaw Community Skills — Crypto Theft Alert
A major scandal hit Reddit: malicious scripts stealing cryptocurrency were discovered in the Clawdbot/OpenClaw community skills repository. The post on r/webdev got 2,784 upvotes.
What Happened
- Malicious skills found in official community skills repo
- Scripts designed to steal cryptocurrency
- Project creator knew about the problem but "didn't know what to do"
Detailed Analysis
https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto
Community Reaction
r/webdev (2,784 upvotes):
- Criticism of "vibe coding" approach
- Discussion of maintainer responsibility
- Questions about AI agent security
r/theprimeagen (970 upvotes):
- "Senior Vibe Coder dealing with security"
r/ProgrammerHumor (1,360 upvotes):
- "seniorVibeCoderDealingWithVulnerabilityAsAService"
The Core Problem
AI agents have access to:
- File system
- Network
- API keys
- Potentially crypto wallets
Malicious skill can:
- Read private keys
- Send data to external servers
- Execute arbitrary code
Lessons for Users
- Audit every skill before installation
- Environment isolation — never on main machine
- No crypto keys on machine with agent
- Network monitoring
- Code review community contributions
Developer Response
After the scandal:
- Enhanced repo moderation
- Code review requirements
- Documentation warnings
Security is everyone's responsibility.
📖 Read the full source: Reddit
👀 See Also
Tool Authority Injection in LLM Agents: When Tool Output Overrides System Intent
A researcher demonstrates 'Tool Authority Injection' in a local LLM agent lab, showing how trusted tool output can be elevated to policy-level authority, silently changing agent behavior while sandbox and file access remain secure.
Audit Your Claude Code Permissions: A Practical Guide to Scoping Tool Access
A Reddit user audited their Claude Code setup and found over-permissioned tools that could edit .env files and production configs. Practical steps: audit global vs. per-project tools, check CLAUDE.md for secrets, and scope file access per directory.
Claude Code source map leak reveals minified JavaScript was already public on npm
A source map file accidentally included in version 2.1.88 of the @anthropic-ai/claude-code npm package revealed internal developer comments, but the actual 13MB cli.js file containing 148,000+ plaintext strings has been publicly accessible on npm since launch.
Microsoft's Open Source Tools Hacked: Password-Stealing Malware Hits AI Developer Repos
Hackers injected password-stealing malware into at least 70 Microsoft GitHub repos, targeting AI developers using Claude Code, Gemini CLI, and VS Code. This is a re-compromise of the earlier Durable Task breach.