VirusTotal : discovered that hundreds of skills on ClawHub were infected with malware, including Trojans and the Atomic Stealer malware, with one attacker alone uploading over 300 infected skills disguised as legitimate tools. OpenClaw just announced today (February 8, 2026).