security-research

• 2026-02-01

  Hunting Malware That Hunts AI Agents: Inside the ClawdHub Supply Chain Attack

  A deep dive into the first documented supply chain attack targeting AI agents in the wild — 9 trojanized skills, ~6,880 downloads, and a kill chain that turns documentation into malware.

  supply-chain malware ai-agents security-research threat-analysis