Malicious OpenClaw skills found on ClawHub marketplace

Palo Alto Networks' Unit 42 found five malicious skills on ClawHub, OpenClaw's official marketplace, delivering infostealers and fraud. Threat actors bypassed VirusTotal and ClawScan checks with inflated file sizes and evasive techniques. All malicious skills were removed and accounts banned.