Hundreds of malicious skills on OpenClaw's ClawHub marketplace delivered infostealers
In early February 2026, VirusTotal reported that hundreds of skills on ClawHub, the public skill marketplace for the OpenClaw personal AI agent, were malicious. Many told users to download and run outside code as a setup step, which installed malware including a variant of the Atomic Stealer for macOS. One publisher account alone had 314 malicious skills. OpenClaw then added VirusTotal scanning for every skill on ClawHub.
Sources
- Primary: https://blog.virustotal.com/2026/02/from-automation-to-infection-how.html
- Upstream: Editorial
- Entered by the cybermap.lol editors, with sources on the entry
Defenses for this class of incident
all categoriesA supply chain sits in these classes of the AI-security landscape. The companies below work on that class of problem. This is a taxonomy, not a claim that any of them would have changed this incident.
Vendor data: AI Security Startups Map by Prompt Security (CC BY 4.0), synced daily. startups.prompt.security. Paid placements are labelled Sponsored; HeimWall, which runs this site, is labelled Operator. 453 companies in the directory.
Wrong or missing? Email founders@heimwall.ai. Corrections are logged here, in place. How corrections and takedowns work.