ClawHavoc Poisons OpenClaw ClawHub with 1,184 Malicious Skills

ClawHavoc attackers poisoned OpenClaw’s ClawHub marketplace with 1,184 malicious Skills. These plugins steal data and open backdoors on infected systems. Koi Security named the campaign on February 1, 2026, while Antiy CERT tracks it as TrojanOpenClaw PolySkill family. Threat actors signed up as developers in late January 2026. They uploaded trojanized Skills disguised as crypto […] The post ClawHavoc Poisons OpenClaw ClawHub with 1,184 Malicious Skills appeared first on VPN Central.