Product
ClawHub
- First Reported
- Feb 1, 2026
- Latest Reported
- Jun 3, 2026
Reported Context (4)
- Malicious ClawHub skills targeted diverse victims Software Supply-Chain Malware Trends: January–May 2026
- with account takeovers representing 60 to 65% of new records in the week of May 11th. Third, malicious ClawHub skills have grown rapidly since January, with over 700 in the database by end of March. Nearly a fifth OpenSourceMalware Show #7 Examines Miasma, Moika and Shifting Supply-Chain Attacks
- The OpenSourceMalware team has identified a new evolution in ClawHub skill-based attacks. Rather than embedding base64-encoded payloads directly in SKILL.md files — a technique we've documented extensively—threat actors 40 Malicious ClawHub Skills Lure Users to External Malware Site
- to take a look at some of the many AI Skills registries. We started with the official ClawdBot registry ClawHub. Researchers Find 386 Malicious ClawHub Skills Delivering Information-Stealing Malware
Malware (2)
People (8)
Threat Actors (1)
MITRE ATT&CK (14)
Vendors (2)
Products (13)
Tools (4)
Industries (3)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.