⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More

Summary: OpenClaw partnered with Google's VirusTotal to scan skills uploaded to its ClawHub registry, after malicious skills were found on the public marketplace and Trend Micro reported actors on the Exploit.in forum discussing OpenClaw skill deployment for botnet operations. Veracode found npm and PyPI packages named "claw" grew from near zero at the start of the year to over 1,000 by early February 2026, opening room for malicious typosquats.
What's compelling: Over 1,000 "claw"-named packages now sit on npm and PyPI, and criminals are already discussing how to weaponize agent skills on a public registry - the marketplace your developers treat as trusted is the delivery path.

Read the original at The Hacker News ↗