Expired80% confidenceFactTime unknown
OpenClaw's CloudHub contains nearly 3,000 Skills, of which 341 are malicious, typically luring users into downloading password-protected ZIP files to evade antivirus detection.
1
Sources
80%
Confidence
Medium-term (~90 days)
Relevance
6/3/2026
First Seen
This claim has expired. It is kept for the record and no longer describes the current state.
Valid until: 9/1/2026(expired)
Sources
Related Entities
Related Claims
Unverified该教程使用的技术栈包括Cloud Code、Astro.js、Docker+Docker Compose、hosting.com的VPS以及Certbot+Let's Encrypt69% similarUnverified恶意包一旦被安装，可在安装脚本或运行时读取环境变量和配置文件，窃取真实API密钥、云凭证、数据库密码等敏感信息66% similarUnverifiedCloudSEK 公开了一个凭证暴露查询工具（exposure.cloudsek.com/ai-supply-chain-incident）用于检查密钥是否出现在攻击者收集的数据中65% similarUnverified封装安装包常见的恶意植入手段包括键盘记录器、后台挖矿程序和凭证窃取模块（扫描浏览器Cookie、本地密码管理文件和SSH密钥）64% similarUnverifiedDirectly executing Skill code downloaded from the internet or autonomously generated by an agent in the host environment poses security risks, as it may contain dangerous operations such as deleting files, accessing sensitive directories, or launching network attacks.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/40385API
curl https://kongchang.com/api/v1/knowledge/claims/40385MCP
get_claim(id=40385)