{
  "slug": "clawhavoc",
  "name": "ClawHavoc",
  "aliases": [
    "ClawHub skills wave"
  ],
  "status": "dormant",
  "firstSeen": "2026-01-27",
  "lastSeen": "2026-01-27",
  "lastReviewed": "2026-09-20T00:00:00Z",
  "summary": "Malicious OpenClaw skills delivered stealers and backdoors.",
  "description": "A ClawHub supply-chain wave used fake prerequisites and malicious skills; 341 of 2,857 reviewed skills were reported malicious.",
  "actor": "ClawHavoc",
  "platforms": [
    "clawhub",
    "github"
  ],
  "ttps": [
    {
      "framework": "atr",
      "id": "supply-chain"
    }
  ],
  "timeline": [
    {
      "date": "2026-01-27",
      "branch": "skill",
      "id": "341/2857-clawhub-skills",
      "note": "Koi and Unit 42 reported the malicious skill set.",
      "source": "https://www.koi.ai/blog/clawhavoc-341-malicious-clawedbot-skills-found-by-the-bot-they-were-targeting"
    }
  ],
  "iocs": [
    {
      "type": "package",
      "value": "clawhub skill",
      "firstSeen": "2026-01-27",
      "source": "https://unit42.paloaltonetworks.com/openclaw-ai-supply-chain-risk/"
    }
  ],
  "exposedConfigurations": [
    {
      "label": "Skills are installed from ClawHub",
      "matcher": {
        "some": "skills",
        "where": {
          "field": "source",
          "op": "regex",
          "value": "clawhub"
        }
      }
    }
  ],
  "advisories": [
    "ACVE-2026-0414"
  ],
  "incidents": [],
  "sources": [
    {
      "url": "https://www.koi.ai/blog/clawhavoc-341-malicious-clawedbot-skills-found-by-the-bot-they-were-targeting",
      "publisher": "Koi",
      "date": "2026-01-27"
    },
    {
      "url": "https://unit42.paloaltonetworks.com/openclaw-ai-supply-chain-risk/",
      "publisher": "Unit 42",
      "date": "2026-01-27"
    }
  ],
  "dormantAfterDays": 30
}