Malware advisory
MAL-2026-3757
Malicious code in claw-subagent-service (npm)
Affected packages
| Package | Ecosystem | Version | Verdict | Scanned (UTC) |
|---|---|---|---|---|
claw-subagent-service | npm | 0.0.146 | High risk | 2026-06-03 |
claw-subagent-service | npm | 0.0.149 | High risk | 2026-06-03 |
claw-subagent-service | npm | 0.0.140 | High risk | 2026-06-03 |
claw-subagent-service | npm | 0.0.141 | High risk | 2026-06-03 |
claw-subagent-service | npm | 0.0.137 | High risk | 2026-06-03 |
claw-subagent-service | npm | 0.0.138 | High risk | 2026-06-03 |
claw-subagent-service | npm | 0.0.136 | High risk | 2026-06-03 |
claw-subagent-service | npm | 0.0.130 | High risk | 2026-06-03 |