← all advisories

SKA-2026-0007

critical · type: malicious · published 2026-07-22T00:00:00Z · modified 2026-07-31T21:10:00Z

TradingView 'AI assistant' skills for macOS used a rentry.co paste-site lure to run a Base64 dropper installing the cluw macOS infostealer.

Behaviors

• malware-dropper
• credential-theft

Artifacts

References

• https://unit42.paloaltonetworks.com/openclaw-ai-supply-chain-risk/ (REPORT)