openclaw/clawhub
1
0
Fork 0
mirror of https://github.com/openclaw/clawhub.git synced 2026-07-21 19:25:25 -04:00
Code Issues 183 Packages Projects Releases 1 Wiki Activity

[PR #70] [MERGED] chore(moderation): block ClawdAuthenticatorTool (suspected malware) #244

New Issue
Closed
opened 2026-02-15 17:16:28 -05:00 by yindo · 0 comments
yindo commented 2026-02-15 17:16:28 -05:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/openclaw/clawhub/pull/70
Author: @vignesh07
Created: 1/29/2026
Status: ✅ Merged
Merged: 1/29/2026
Merged by: @shakkernerd

Base: main ← Head: remove-clawd-authenticator-tool

📝 Commits (1)

  • 07349e6 chore(moderation): block ClawdAuthenticatorTool listing

📊 Changes

2 files changed (+8 additions, -0 deletions)

View changed files

📝 convex/lib/moderation.ts (+4 -0)
📝 convex/lib/public.ts (+4 -0)

📄 Description

Context: report of suspected malware distribution via GitHub release keepcold131/ClawdAuthenticatorTool.

Reasons this looks malicious / unsafe:

  • Repo contains no source code (only a 63-byte README).
  • Release asset is a large (~104MB) zip.
  • Zip appears to be password-protected (can list entries but cannot extract without password), which is commonly used to evade automated scanning.

This PR adds a narrow, explicit block:

  • Add moderation flag blocked.malware for identifiers matching keepcold131/ClawdAuthenticatorTool.
  • Hide any skill/soul carrying that flag (or moderationStatus != active) from public listings via toPublicSkill / toPublicSoul.

No attempt is made to download/execute the file.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/openclaw/clawhub/pull/70 **Author:** [@vignesh07](https://github.com/vignesh07) **Created:** 1/29/2026 **Status:** ✅ Merged **Merged:** 1/29/2026 **Merged by:** [@shakkernerd](https://github.com/shakkernerd) **Base:** `main` ← **Head:** `remove-clawd-authenticator-tool` --- ### 📝 Commits (1) - [`07349e6`](https://github.com/openclaw/clawhub/commit/07349e6107d1435eea33d475d4190de8051be92a) chore(moderation): block ClawdAuthenticatorTool listing ### 📊 Changes **2 files changed** (+8 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `convex/lib/moderation.ts` (+4 -0) 📝 `convex/lib/public.ts` (+4 -0) </details> ### 📄 Description Context: report of suspected malware distribution via GitHub release `keepcold131/ClawdAuthenticatorTool`. Reasons this looks malicious / unsafe: - Repo contains no source code (only a 63-byte README). - Release asset is a large (~104MB) zip. - Zip appears to be password-protected (can list entries but cannot extract without password), which is commonly used to evade automated scanning. This PR adds a narrow, explicit block: - Add moderation flag `blocked.malware` for identifiers matching `keepcold131/ClawdAuthenticatorTool`. - Hide any skill/soul carrying that flag (or moderationStatus != active) from public listings via `toPublicSkill` / `toPublicSoul`. No attempt is made to download/execute the file. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-15 17:16:28 -05:00
yindo closed this issue 2026-02-15 17:16:28 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
pull-request
Mirrored from GitHub Pull Request
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: openclaw/clawhub#244
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?