🚨Risk Alert | OpenClaw Plugin Center Suffers Large-Scale Supply Chain Poisoning Attack According to SlowMist's monitoring (@SlowMist_Team), due to the lack of a strict review mechanism on the ClawHub platform, a large number of malicious skills have infiltrated and are used to spread malicious code. Currently, 341 malicious skills have been identified. These skills are typically disguised as encrypted assets, security checks, or automation tools. Attackers use the file http:/SKILL.md as the entry point for execution commands, hiding malicious commands through Base64 encoding and employing a two-stage loading mechanism to evade detection. The first stage obtains the payload via curl; the second stage deploys a sample named dyrtvwjfveyxjf23 to trick users into entering system passwords and steal local documents and system information. SlowMist advises users to review any commands that need to be copied and executed, be wary of prompts for system privileges, and prioritize obtaining tools through official channels. #OpenClaw