Home Today’s Briefing Deep Dives In Play Trending For You Discover My Stack Saved Off Radar Search

Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

Vertical SaaS
Restaurant Technology
Vulnerability Disclosure
WordPress Plugin Security
Agent-to-agent payments
AI Code Review
Android XR
Prediction Markets
Quantum Computing Hardware
AI Coding Assistants

How this is made

Today For You My Stack Off Radar Search

other

ClawHavoc

January 2026 campaign that pushed 1,184 malicious skills from 12 publisher accounts sharing one command-and-control address.

Current clusters

invest1 distinct publisher

ClawHavoc's 12 accounts outshipped the malicious-skill census by 7.5 times

OWASP's v1.0 standard says the payload is prose and the permissions belong to the host agent, which is another way of saying the SAST and SCA licences already on the books scan straight past the thing teams are installing this quarter.

Publishers:kenhuangus.substack.com

Reality

Evidence42
Adoption20
Hype gap+28
Incentives78

Confidence38

ClawHavoc — other — Clarity Today