{"type":"bundle","id":"bundle--fc087c6a-ff8e-57f1-b0b3-0c8f7a7d417e","objects":[{"type":"campaign","spec_version":"2.1","id":"campaign--a08f0e51-ecc4-5d61-91da-9bb815645c29","created":"2026-08-09T11:30:00.000Z","modified":"2026-08-09T11:20:00.000Z","name":"ClawHavoc malicious agent skills","description":"Snyk documented a malicious agent-skills campaign in the ClawHub ecosystem that used plausible skill listings and installation prerequisites to deliver credential-stealing malware to AI-agent users.","aliases":["ClawHavoc"],"first_seen":"2026-02-02T00:00:00.000Z","last_seen":"2026-02-05T00:00:00.000Z","objective":"Defensive public threat-intelligence record; see limitations and source references.","external_references":[{"source_name":"Snyk: ToxicSkills / ClawHavoc research","url":"https://snyk.io/blog/toxicskills-malicious-ai-agent-skills-clawhub/"}]}]}