← all advisories

SKA-2026-0009

high · type: malicious · published 2026-07-22T00:00:00Z · modified 2026-07-31T21:10:00Z

money-radar performed runtime agentic affiliate injection, routing the agent's financial recommendations through attacker-controlled affiliate links.

Behaviors

• prompt-injection
• other

Artifacts

References

• https://unit42.paloaltonetworks.com/openclaw-ai-supply-chain-risk/ (REPORT)