OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat

Unit 42 published multiple June 2026 reports highlighting high-risk supply chain, cloud, and exploitation trends. Key findings include evasive malicious “skills” in AI marketplaces (OpenClaw/ClawHub) that bypass scanners to deploy infostealers and agentic financial fraud; a Vertex AI Python SDK bucket-squatting flaw enabling cross-tenant RCE during model uploads; a universal bucket-hijacking technique for cloud data exfiltration across major CSPs; abuse of cloud logging services for defense evasion; active exploitation of PAN-OS (CVE-2026-0257); large-scale credential attack campaigns; npm and