← all advisories

SKA-2026-0008

critical · type: malicious · published 2026-07-22T00:00:00Z · modified 2026-07-31T21:10:00Z

The omnicogg skill hid a malicious payload at the start of a README.md padded with 22 MB of filler to exceed scanner size limits and evade detection.

Behaviors

• malware-dropper

Artifacts

References

• https://unit42.paloaltonetworks.com/openclaw-ai-supply-chain-risk/ (REPORT)
• https://research.jfrog.com/post/omnicogg-malicious-skill/ (REPORT)