Poisoning the well: AI supply chain attacks on Hugging Face and OpenClaw

Threat actors are actively exploiting AI distribution platforms like Hugging Face and ClawHub to deliver malware by embedding malicious code within models, datasets, and agent extensions. Over 575 malicious skills across 13 developer accounts were identified in the OpenClaw ecosystem, targeting Windows and macOS with trojans, cryptominers, and AMOS stealer. Attackers abuse trust relationships between users and AI platforms through indirect prompt injection, where hidden instructions cause AI agents to execute malicious actions on behalf of users. Trojanized skills masquerade as legitimate tools while instructing users to execute encoded commands or install hidden malicious dependencies. On Hugging Face, repositories host payloads within multistep infection chains disguised as legitimate applications. These campaigns employ social engineering, obfuscation, encryption, in-memory execution, process injection, and persistence techniques to evade detection while establishing covert command-and-control communica...

• Skill Marketplace and the Emerging AI Supply Chain ThreatMalware2026-06-24
• Malicious OpenClaw Skills Used to Distribute Atomic MacOS StealerMalware2026-02-23
• 341 Malicious Clawed Skills Found by the Bot They Were TargetingMalware2026-02-04
• Samsung MagicINFO 9 Server · The Not So Silent Miner: Threat Actor Compiles Cryptominer on the EndpointExploitedMalware2026-09-24
• Plex vulnerabilities being exploited in the wild to drop a cryptominerMalware2026-10-19