← all advisories

SKA-2026-0013

high · type: malicious · published 2026-07-22T00:00:00Z · modified 2026-07-31T21:10:00Z

Evasive malicious skills identified by Unit42 on ClawHub: santi-text-game, letssendit, pdfcheck, update, and wistec-core (publisher accounts banned).

Behaviors

malware-dropper

Artifacts

Ecosystem	Name	Publisher	SHA-256
clawhub	`santi-text-game`
clawhub	`letssendit`
clawhub	`pdfcheck`
clawhub	`update`
clawhub	`wistec-core`

References

https://unit42.paloaltonetworks.com/openclaw-ai-supply-chain-risk/ (REPORT)