GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Conversation

Notices

  1. Embed this notice
    ekiledjian (edwardk@infosec.exchange)'s status on Thursday, 19-Feb-2026 02:51:10 JST ekiledjian ekiledjian

    The ClawHavoc campaign poisoned OpenClaw's official marketplace, ClawHub, by distributing 1,184 malicious Skills designed to steal data and enable backdoor access. This attack exploited the platform's permissive upload model, leading to potential system compromises through trojanized tools disguised as legitimate software.
    https://cybersecuritynews.com/clawhavoc-poisoned-openclaws-clawhub/

    In conversation about 6 months ago from infosec.exchange permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: blogger.googleusercontent.com
      ClawHavoc Poisoned OpenClaw’s ClawHub with 1,184 Malicious Skills, Enabling Data Theft and Backdoor Access
      from @The_Cyber_News
      ClawHavoc is a large-scale supply chain attack that abused OpenClaw’s ClawHub to distribute 1,184 malicious Skills enabling data theft and backdoor access.

    Feeds

    • Activity Streams
    • RSS 2.0
    • Atom
    • Help
    • About
    • FAQ
    • TOS
    • Privacy
    • Source
    • Version
    • Contact

    GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

    Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.