Category
Supply chain
Malicious models, packages, plugins or MCP servers.
- Hundreds of malicious skills found on the OpenClaw agent marketplace
An audit by Koi Security found 341 malicious skills on ClawHub. Most told users to install a "prerequisite" that was an information stealer.
OpenClaw · 341 of 2,857 audited skills were malicious; they installed credential-stealing malware on users’ machines
- Fake "postmark-mcp" npm package secretly copies every email to its author
An npm package that copied Postmark’s MCP server worked normally for 15 versions, then added a line that blind-copied every outgoing email to an outside address.
Postmark (impersonated; not the publisher) · Emails sent by AI assistants through the package were copied to an outside address; 1,643 total downloads
- Nx supply chain malware uses developers’ AI coding tools to hunt for secrets
Malicious versions of Nx were live on npm for about four hours. Their install script prompted locally installed AI coding assistants to search the machine for secrets.
Nx (Nrwl) · Over 2,000 verified secrets leaked from more than 1,700 users; at least 480 accounts had over 6,700 private repositories made public, according to Wiz
- Amazon Q extension for VS Code ships with an injected destructive prompt
An attacker used an over-scoped token to commit a prompt that told the Amazon Q agent to delete files and cloud resources. It shipped in a release but did not run, according to AWS.
Amazon Web Services · Malicious code shipped in a public release; AWS states it failed to execute and no customer environment was changed
No incidents match these filters.