Over 575 malicious OpenClaw skills deliver malware

Tier B · Patch this week – Put it in the sprint

Who’s exposed: Windows and macOS users installing malicious OpenClaw skills

Tier B because: Exploited in the wild OR public exploit

Reach

Attack

Damage

Fix

Exploited in the wild · Full takeover · Supply chain

The Brief

Over 575 malicious OpenClaw skills delivered malware to Windows and macOS, per Help Net Security.
Acronis TRU Cyber Pulse 2026 reports cybercriminals using AI agents to coordinate attacks.
Attackers also use stolen credentials to access linked services and tools that interfere with intrusion detection and system recovery.

Why it matters

Developers who install third-party OpenClaw skills may run malware on Windows and macOS machines, and linked services could be reached with stolen credentials.

The checklist behind the tier

Checklist · 4 of 10 yes

Yes	Hits tech teams	Judgment: OpenClaw AI agent skills run on developer and IT workstations (Windows, macOS), so teams are affected.
No	Core infrastructure	Judgment: a single AI agent platform's skill ecosystem, not core infrastructure like OpenSSH or GitHub.
No	Popular tool	Judgment: OpenClaw is a niche AI agent platform, not mainstream developer tech used by many teams.
Yes	Exploited in the wild	Help Net Security: over 575 malicious OpenClaw skills delivered malware to Windows and macOS.
No	Public exploit	No source says exploit code or a proof-of-concept is published.
No	Remote, no login	No source says the attack needs no credentials or user interaction over the network.
Yes	Full takeover	Help Net Security: malicious skills delivered malware to Windows and macOS, implying code execution on victim systems.
No	Secrets exposed	Help Net Security: stolen credentials are used against linked services, but the snippet does not tie data theft to these skills.
Yes	Supply chain	Help Net Security: malicious OpenClaw skills, published to a skill channel, delivered malware to users.
No	No fix yet	No source says a patched version or fix is available or unavailable.

Source

Over 575 malicious OpenClaw skills delivered malware to Windows and macOS ↗ Help Net Security · 2h ago

First seen 2h ago · 1 source · Full story page · How tiers are decided