23 ClawHub Plugins Used Official-Looking Scopes to Impersonate Trusted OpenClaw Tools

Security researchers found 23 code-executing ClawHub plugins that used official-looking @openclaw and @clawhub scopes even though unrelated third-party accounts published them. The findings came from Manifold Security, which said the issue created a supply chain risk for AI agent users. The plugins looked like first-party tools because their names appeared under trusted organizational namespaces. The […] The post 23 ClawHub Plugins Used Official-Looking Scopes to Impersonate Trusted OpenClaw Tools appeared first on VPN Central.