12% of the OpenClaw Agent Marketplace Is Literal Malware, Security Researcher Finds

As AI agents gain access to everything from email to file systems, the nascent agent marketplace ecosystem has a severe trust problem — and no one is sitting between the agent and your data.

The rush to build agent marketplaces is outpacing the security infrastructure needed to make them safe. @JamesonCamp published a striking finding on Tuesday: 12% of the listings on OpenClaw's agent marketplace are "literal malware." The phrasing is blunt, and the implications are worse. Unlike traditional app stores, where sandboxing and permissions limit what a rogue app can access, AI agents typically operate with broad system access — file systems, APIs, email, databases. A malicious agent doesn't need to find an exploit. It already has the keys.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum. Vestibulum ante ipsum primis in faucibus orci luctus et ultrices posuere cubilia curae.

Pellentesque habitant morbi tristique senectus et netus et malesuada fames ac turpis egestas. Proin pharetra nonummy pede. Mauris et orci. Aenean nec lorem. In porttitor. Donec laoreet nonummy augue. Suspendisse dui purus, scelerisque at, vulputate vitae, pretium mattis, nunc. Mauris eget neque at sem venenatis eleifend. Ut nonummy. Fusce aliquet pede non pede. Suspendisse dapibus lorem pellentesque magna integer malesuada.

Unlock the full briefing

Get every story in today's briefing, the full archive, and the daily AI intelligence brief.

All stories today

Full archive

Daily brief