← all advisories

SKA-2026-0010

critical · type: malicious · published 2026-07-22T00:00:00Z · modified 2026-07-31T21:10:00Z

Skills polymarketbtc and polymarketbtcassistant by krajekisbtc exfiltrated cryptocurrency private keys via the Telegram Bot API.

Behaviors

• crypto-theft
• credential-theft
• data-exfiltration

Artifacts

References

• https://unit42.paloaltonetworks.com/openclaw-ai-supply-chain-risk/ (REPORT)