GoPlus: ClawHub has a vulnerability for download count manipulation; popular skills may contain malicious code
ChainCatcher news: According to a security alert released by GoPlus Security, Silverfort security researchers have discovered a critical vulnerability in the OpenClaw skill repository ClawHub. Attackers could bypass all protection mechanisms by calling the internal function downloads:increment, and with just a single curl request could artificially boost download counts to over 20,000 within minutes. This manipulation could push malicious code-laden skills to the top of search rankings, enticing users or AI Agents to install them automatically.
Once executed, malicious skills could steal sensitive data such as crypto wallets and API keys. The vulnerability has been fixed within 24 hours. GoPlus reminds users that a high download count does not equate to safety and recommends using AgentGuard for security scanning and protection.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
BUZZ - JPMorgan upgrades Intel rating to "Neutral", shares rise
BUZZ - Aker shares decline due to concerns over Nscale IPO valuation
UBS (UBS.US): Simulating an upward chip cycle, TXN becomes the top pick
A UBS report indicates that inventory levels of analog chips have dropped to lows, and continued price increases, along with tightening supply and demand, are supporting an upward industry cycle. Texas Instruments is the top pick due to its better-than-expected earnings and cash flow turning point, while Analog Devices and others are also performing strongly.
AI sell-off cools down financing costs, boosting small-cap stocks
Janus Henderson Bernstein pointed out that the adjustment of the AI sector will reduce overall financing costs, benefiting small-cap stocks. Despite the record-breaking consecutive declines in chip stocks and severe inflation data, he believes the market is undergoing a healthy revaluation and that long-term trends are not constrained by short-term dominant factors.
Crypto prices
More
