reverse-engineering

• 2026-02-01

  Hunting Malware in the AI Agent Supply Chain: 29 Trojanized Skills, 14K Downloads, One Threat Actor

  We found a coordinated malware campaign on ClawdHub — 4 fake accounts, 29+ trojanized AI agent skills, ~14,000 downloads. Here's the full investigation: from discovery to binary dissection.

  security malware-analysis supply-chain ai-agents reverse-engineering threat-intelligence