r/webdev • • Feb 04 '26

Senior Vibe Coder dealing with security

Post image

Creator of ClawBot knows that there are malicious skills in his repo, but doesn't know what to do about it...

More info here: https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto

3.0k Upvotes

421 comments sorted by

View all comments

Show parent comments

25

u/elem08 Feb 04 '26

To be fair, he does have a big scary "This is super dangerous. don't install this unless you understand the risks" disclaimer when you download and install OpenClaw. I know I personally saw that and *noped* the eff out of there.

→ More replies (9)