Back Feeds2.Feedburner

23 ClawHub plugins squatting official scopes expose AI registry security gaps

Feeds2.Feedburner •Help Net Security • June 22, 2026

Plugin registries for AI agents use npm-style scopes like @openclaw/ and @clawhub/ to signal who published a package. But on ClawHub, a registry whose plugins run with Claude, OpenClaw, and other agents, those official scopes weren’t reserved to their owners for every package already published. In this Help Net Security video, Ax Sharma, Head of Research at Manifold Security, breaks down how 23 code-executing plugins ended up under ClawHub’s official @openclaw and @clawhub scopes while … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

23 ClawHub Plugins Exploit Scope Squatting Vulnerability A security vulnerability in ClawHub's plugin registry allowed unauthorized third-party plugins to publish under official organizational scopes, specifically @openclaw and @clawhub. Researchers identified 23 such plugins that masquerade as legitimate tools from OpenClaw and ClawHub, potentially compromising the integrity of AI agent applications. This issue stems from a lack of enforcement of scope ownership, enabling these plugins to inherit first-party credibility without any verified relationship to the organizations. The incident highlights significant supply-chain weaknesses in the AI agent ecosystem, affecting users who rely on these plugins for functionality. No specific CVEs were reported, but the risk of exploitation is high due to the nature of the plugins. The situation is currently under investigation by security researchers. 4 sources 59

23 ClawHub plugins squatting official scopes expose AI registry security gaps

The full story

Extracted Entities

Platforms (1)

Tools (1)