ClawHub namespace lapse exposes agent plugin risk
ClawHub has moved to contain a supply-chain weakness in its plugin registry after researchers found 23 code-executing packages published under official-looking @openclaw/ and @clawhub/ scopes by accounts with no verified link to either project.…