Snyk: ClawHub Skills Dropping Reverse Shells
Snyk's investigation reveals AMOS infostealer payloads hidden in typosquatted ClawHub skills. Detailed analysis and protection guide.
ClawHavoc: 341 Malicious Skills Found in ClawHub
Koi Security's comprehensive audit uncovers a massive supply-chain attack targeting OpenClaw users through poisoned ClawHub skills.
DigitalOcean Launches 1-Click OpenClaw Deploy
DigitalOcean makes self-hosting OpenClaw trivial with a security-hardened, production-ready one-click deployment option.
ClawHub Partners with VirusTotal for Skill Scanning
In response to the ClawHavoc supply-chain attack, ClawHub integrates VirusTotal scanning for all published skills.
Awesome OpenClaw Skills: 3,002 Vetted from 5,705
VoltAgent's curated list filters the ClawHub registry from 5,705 to 3,002 trusted skills, removing spam, duplicates, and malware.
v2026.2.6: Opus 4.6, xAI Grok, Token Dashboard
New release adds Anthropic Opus 4.6 and xAI Grok model support, a Web UI token usage dashboard, and native Voyage AI memory integration.
CNBC Profiles OpenClaw's Rise — and Controversy
CNBC traces the journey from Clawdbot to Moltbot to OpenClaw, covering both the excitement and the growing security concerns.
v2026.2.3: Cron Overhaul & Channel Security Fixes
Major cron job rework brings announce delivery mode and auto-cleanup. Critical security fixes for channel metadata leakage and media handling.
v2026.2.2: Feishu/Lark Support & Agents Dashboard
New release brings Feishu/Lark integration for the Chinese market, a Web UI Agents dashboard, and the most security-dense release yet.
v2026.2.1: System Prompt Safety & TLS 1.3
First February release adds system prompt safety guardrails, mandatory TLS 1.3 for gateway listeners, and fixes for memory search.
Page 6 of 6