Topic: openguardrails research

Beware: ClawHub Fake Fix Spreads Info-Stealing Malware

A new malware campaign targets ClawHub users by hiding malicious code within seemingly helpful comments on legitimate skills, bypassing traditional security scans that only inspect skill packages. The attack uses Base64-encoded comments to deploy a loader that fetches the AMOS infostealer, exploi...