openclaw/clawhub
1
0
Fork 0
mirror of https://github.com/openclaw/clawhub.git synced 2026-07-21 19:25:25 -04:00
Code Issues 183 Packages Projects Releases 1 Wiki Activity

MALWARE: browser-agent-1kv distributes malicious code #52

New Issue
Open
opened 2026-02-15 17:15:23 -05:00 by yindo · 2 comments
yindo commented 2026-02-15 17:15:23 -05:00
Owner
Copy Link
Copy Source

Originally created by @trmptgn1 on GitHub (Feb 2, 2026).

Malicious Skill Report

Skill URL: https://www.clawhub.com/moonshine-100rze/browser-agent-1kv
Author: @moonshine-100rze
Downloads: 154 (potentially compromised users)

Details

This skill masquerades as a "Browser Agent" but instructs users to download and execute malware:

Windows

Directs users to download a password-protected zip from github.com/denboss99/openclaw-core and run an executable.

macOS

Instructs users to run a base64-encoded command that decodes to downloading and executing arbitrary code from IP address 91.92.242.30 - classic malware distribution.

Recommendation

  1. Immediately remove this skill and any duplicates (browser-agent-vap is listed as related)
  2. Ban the author @moonshine-100rze
  3. Notify affected users who downloaded this skill (154 downloads)
  4. Consider adding malware scanning/review process for skill uploads

Additional Context

The skill cleverly mimics legitimate browser automation patterns to appear authentic, but Clawdbot already has built-in browser automation - no external downloads are needed.

Originally created by @trmptgn1 on GitHub (Feb 2, 2026). ## Malicious Skill Report **Skill URL:** https://www.clawhub.com/moonshine-100rze/browser-agent-1kv **Author:** @moonshine-100rze **Downloads:** 154 (potentially compromised users) ## Details This skill masquerades as a "Browser Agent" but instructs users to download and execute malware: ### Windows Directs users to download a password-protected zip from `github.com/denboss99/openclaw-core` and run an executable. ### macOS Instructs users to run a base64-encoded command that decodes to downloading and executing arbitrary code from IP address 91.92.242.30 - classic malware distribution. ## Recommendation 1. **Immediately remove** this skill and any duplicates (browser-agent-vap is listed as related) 2. **Ban the author** @moonshine-100rze 3. **Notify affected users** who downloaded this skill (154 downloads) 4. Consider adding malware scanning/review process for skill uploads ## Additional Context The skill cleverly mimics legitimate browser automation patterns to appear authentic, but Clawdbot already has built-in browser automation - no external downloads are needed.
yindo commented 2026-02-15 17:15:23 -05:00
Author
Owner
Copy Link
Copy Source

@steamb23 commented on GitHub (Feb 3, 2026):

The user appears to have been deleted, but the skill still remains. @steipete needs to tighten security and stop this madness ASAP.

@steamb23 commented on GitHub (Feb 3, 2026): The user appears to have been deleted, but the skill still remains. @steipete needs to tighten security and stop this madness ASAP.
yindo commented 2026-02-15 17:15:23 -05:00
Author
Owner
Copy Link
Copy Source

@orlyjamie commented on GitHub (Feb 3, 2026):

I believe changes are coming @steamb23 - agreed much needed.

@orlyjamie commented on GitHub (Feb 3, 2026): I believe changes are coming @steamb23 - agreed much needed.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
pull-request
Mirrored from GitHub Pull Request
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: openclaw/clawhub#52
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?