23 ClawHub plugins squatting official scopes expose AI registry security gaps

Plugin registries for AI agents use npm-style scopes like @openclaw/ and @clawhub/ to signal who published a package. But on ClawHub, a registry whose plugins run with Claude, OpenClaw, and other agents, those official scopes weren’t reserved to their owners for every package already published. In t…

View Post on Scour ↗

More from Help Net Security on Scour.