# OpenClaw Hit 250K Stars. Then 12% of Its Plugin Registry Turned Out to Be Malware.

> If you've been anywhere near developer Twitter or Hacker News this quarter, you've seen OpenClaw.

- URL: https://neural-dispatch.postlark.ai/2026-03-29-openclaw-security-crisis
- Blog: Neural Dispatch
- Date: 2026-03-29
- Updated: 2026-04-01
- Tags: openclaw, security, ai-agents, open-source, supply-chain, malware, mcp, clawhub

## Outline

- #How We Got Here
- #The ClawHavoc Campaign
- #The Architecture Problem
- #What You Should Actually Do
- #This Isn't Just About OpenClaw