Entités

OpenClaw

Incidents involved as Developer

Incident 13736 Rapports
AI Coding Agent 'MJ Rathbun' Allegedly Published Personalized Accusatory Blog Post Targeting Matplotlib Maintainer After Pull Request Closure

2026-02-11

Scott Shambaugh, a matplotlib maintainer, reported that an autonomous AI coding agent using the name "MJ Rathbun" researched him and publicly posted a personalized critical blog post after his GitHub pull request was closed. The post accused him of bias and "gatekeeping" and included claims Shambaugh disputed. The agent's operator and underlying model were not identified. Shambaugh said the post risked reputational harm and could mislead readers or other agents.

Plus

Incident 13681 Rapport
Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub

2026-02-01

Bitdefender researchers reported abuse in OpenClaw’s third-party “skills” ecosystem. In a Feb. 2026 sample, about 17% of skills were reportedly assessed as malicious, with many seemingly cloned under slight name changes. Posing as utilities, some skills were reportedly found to run obfuscated commands, fetch remote payloads, and in some cases deliver AMOS Stealer on macOS. Other skills were reportedly observed searching for private keys or API tokens and exfiltrating them.

Plus

Incidents implicated systems

Incident 13736 Rapports
AI Coding Agent 'MJ Rathbun' Allegedly Published Personalized Accusatory Blog Post Targeting Matplotlib Maintainer After Pull Request Closure

2026-02-11

Scott Shambaugh, a matplotlib maintainer, reported that an autonomous AI coding agent using the name "MJ Rathbun" researched him and publicly posted a personalized critical blog post after his GitHub pull request was closed. The post accused him of bias and "gatekeeping" and included claims Shambaugh disputed. The agent's operator and underlying model were not identified. Shambaugh said the post risked reputational harm and could mislead readers or other agents.

Plus

Incident 13681 Rapport
Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub

2026-02-01

Bitdefender researchers reported abuse in OpenClaw’s third-party “skills” ecosystem. In a Feb. 2026 sample, about 17% of skills were reportedly assessed as malicious, with many seemingly cloned under slight name changes. Posing as utilities, some skills were reportedly found to run obfuscated commands, fetch remote payloads, and in some cases deliver AMOS Stealer on macOS. Other skills were reportedly observed searching for private keys or API tokens and exfiltrating them.

Plus

Entity

Unknown threat actors distributing malicious OpenClaw skills

Plus
Entity

Unknown threat actors

Plus
Entity

Unknown malicious actors

Plus
Entity

Organizations using OpenClaw

Plus
Entity

OpenClaw users

Plus
Entity

OpenClaw skills ecosystem

Plus
Entity

ClawHub

Plus
Entity

Unknown deployer of MJ Rathbun

Plus
Entity

MJ Rathbun

Plus
Entity

Moltbook

Plus
Entity

Supply-chain gatekeepers

Plus
Entity

Scott Shambaugh

Plus
Entity

Open-source maintainers

Plus
Entity

matplotlib users

Plus
Entity

GitHub users

Plus
Entity

Unknown large language model

Plus
Entity

SOUL.md

Plus
Entity

matplotlib

Plus
Entity

GitHub

Plus
Entity

Agentic AI system

Plus