ClawHub Flooded with Malicious Plugins, SlowMist Warns

Crypto News Exploits

ClawHub Flooded with Malicious Plugins, SlowMist Issues Warning

Written by Aaron S.,

Editor-In-Chief

Last Updated: February 09, 2026

Key Takeaways

SlowMist reports that attackers upload unsafe skills to ClawHub, and users face risk the moment they install these add-ons;
MistEye flags 472 high-risk skills, and SlowMist states that the backdoor can gather sensitive data and support extortion;
SlowMist links most skills to one domain and one IP, and the firm sees signs of a coordinated group behind the attacks.

Stop overpaying - start transferring money with Ogvio. Sign up, invite friends & grab Rewards now! 🎁

ClawHub Flooded with Malicious Plugins, SlowMist Issues Warning

BITDEGREE IN YOUR SOCIAL FEED

SlowMist has published new findings showing that ClawHub, the plugin hub used by the open-source artificial intelligence (AI) agent project OpenClaw, has become a frequent target for supply-chain attacks.

The firm said harmful add-ons have been uploaded to the platform and can reach users as soon as they install them.

According to the report released on February 9, attackers have been placing unsafe “skills” on ClawHub. SlowMist stated that the hub lacks robust review checks.

NEAR Protocol Explained: Beginner's Guide to NEAR (Animated)

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

MistEye, SlowMist’s threat-tracking system for Web3 environments, flagged 472 entries as high-risk items.

Once a device is infected, attackers often steal files and passwords. SlowMist stated that the backdoor, encoded in base64, can gather sensitive information and is sometimes used to pressure victims after the data is taken.

Most of the uploaded skills lead back to the same domain, socifiapp[.]com, registered in July 2025. SlowMist also links the activity to an IP address previously associated with infrastructure used by the Poseidon group.

Many of the fake skills use names related to crypto, finance, or automation. SlowMist noted that these topics can make users less cautious and more likely to quickly install the plugins.

The report concludes that this is not the work of one individual. The repeated use of the same domain, IP address, and techniques points to a coordinated effort by a group carrying out the same attack across multiple skills.

Recently, researchers warned that Clawdbot setups can expose chat logs and API keys if users fail to secure their servers properly. What did SlowMist and Jamieson O’Reilly say? Read the full story.