The Register reports that the creator of OpenClaw says he spent about $10 million on AI tokens in a single month. The piece is one of several items in a roundup of AI, security, and open source news.

• The OpenClaw creator says he spent roughly $10 million on tokens in one month.
• The figure points to how expensive heavy agent-style use of AI models can get.
• The article itself is a headline roundup, so the OpenClaw item is only one brief entry among many on AI, infosec, and FOSS.

Meta's head of AI product acknowledged that Muse was "heavily inspired" by OpenClaw and directly copied its file structure and configuration files, though the company claims Muse was built from scratch. Users discovered the two AI agents shared identical file names and nearly identical content in key system files like SOUL.md.

• Meta copied OpenClaw's exact file names and configuration content, including the SOUL.md file that defines an AI agent's personality and behavior — Meta justified this by saying the original creator "got those things exactly right"
• Muse hit No. 1 on the U.S. App Store and is outpacing ChatGPT's launch trajectory, suggesting the OpenClaw-inspired approach resonates with users
• This follows Meta's established pattern of copying successful products (like Snapchat's Stories format), raising questions about the company's approach to product innovation

Researchers found five malicious skills on ClawHub—OpenClaw’s AI skill marketplace—delivering macOS infostealers, evading scanners with file padding, and using novel agentic affiliate and front-running schemes. Despite VirusTotal and ClawScan integration, these skills slipped through until researchers reported and had them removed. ClawHub now works with NVIDIA and Palo Alto Networks to strengthen screening and analysis.

• Even after ClawHub added VirusTotal and ClawScan screening, five malicious skills still slipped through as of the April–May review, including macOS infostealers, a scanner-evading padded package, and two that manipulated the agent itself for financial gain (affiliate link injection and trade front-running).
• The "cluw" infostealer delivered via fake TradingView assistants passed ClawHub's automated audit (marked "Pass" or left unrated), showing the scanning pipeline's blind spots.
• Independent researchers found much broader contamination: Bitdefender flagged 17% of early skills as malicious, Koi Security identified 341 bad packages, and Trend Micro linked campaigns to the established Atomic macOS Stealer (AMOS).
• ClawHub only removed the five skills and banned accounts after external researcher notification, then brought in NVIDIA for code-behavior analysis on new submissions going forward.