Top downloaded skill in ClawHub contains malware

Re:Top downloaded skill in ClawHub contains malware by yjftsjthsd-h on Thursday February 05, 2026 @12:20PM (#46901993)

> The other challenge was I had a lot of specific information that was unsafe to share generally (links to the malware, URLs, how the payload worked) and I needed help generalizing it so it could be both safe and easily understood by others.

What risk would there be to sharing it? Like, sure, s/http/hXXp/g like you did in your comment upthread to prevent people accidentally loading/clicking anything, but I'm not immediately seeing the risk after that

[ Parent | on HN ]

Re:Top downloaded skill in ClawHub contains malware by terracatta on Thursday February 05, 2026 @12:42PM (#46902274)

Already received a private DM from someone who was accidentally infected from my comment upthread above and was angry at me. That's why.

[ Parent | on HN ]

Re:Top downloaded skill in ClawHub contains malware by yjftsjthsd-h on Thursday February 05, 2026 @01:07PM (#46902632)

Okay, but how? Is someone reading commands in a "how the exploit works" write-up and... running them?

[ Parent | on HN ]

Re:Top downloaded skill in ClawHub contains malware by moi2388 on Friday February 06, 2026 @02:22AM (#46910057)

Never underestimate human stupidity, especially when it comes to IT.

[ Parent | on HN ]