23 ClawHub Plugins Abuse Official Org Scopes to Impersonate Trusted AI Agent Tools

A new supply chain threat has surfaced in the AI agent ecosystem that is both subtle and serious. Researchers uncovered 23 plugins on the ClawHub registry published under official organizational scopes without any authorization from ClawHub or its parent project, OpenClaw. These plugins used trusted namespace prefixes to look like genuine, first-party tools, while they […]

The post 23 ClawHub Plugins Abuse Official Org Scopes to Impersonate Trusted AI Agent Tools appeared first on Cyber Security News.