SlowMist: ClawHub is gradually becoming a new target for attackers to carry out supply chain poisoning

DeepTech TechFlow News, February 09 — SlowMist Security Team has discovered that the plugin center ClawHub of the open-source AI Agent project OpenClaw is under a large-scale supply chain poisoning attack. The attacker disguises the “dependency installation/initialization” step in the SKILL.md file, using Base64 encoding to hide malicious commands, implementing a “two-stage” attack chain.

Security scans have identified 341 malicious skills, which steal user passwords, collect host information and documents, and upload data to the attacker’s server. The malicious infrastructure is linked to the Poseidon hacking group.

Protection recommendations:

• Audit all “installation steps” in SKILL.md
• Be cautious of prompts requesting system password input
• Only obtain dependencies and tools from official channels

SlowMist has issued an early warning to clients through the MistEye system, involving 472 malicious skills and related IOC.