This digest covers a range of InfoSec news, from a Salesforce data theft via a compromised Klue integration and a mass phishing campaign impersonating Boots, to the discovery of GlassWASM WebAssembly malware hidden in trojanized Open VSX extensions. It also highlights red-teaming honey pot detection, recent ASUS driver CVEs, a Dropping Elephant loader chain, and Homebrew 6.0’s new security features.

• Compromised Klue OAuth tokens let the Icarus extortion group siphon Salesforce data via ~1,000 API calls in 15-minute bursts over a full day
• Romanian phishers spoofed a Boots "free sample" campaign, hitting ~9 million customers via a hacked Bolivian government checkout page and a compromised UK mail server
• GlassWASM malware hides in trojanized Open VSX extensions (ExarGD.vsblack, noellee-doc/flint-debug), using a Solana wallet to fetch encrypted C2 addresses for second-stage payloads
• Homebrew 6.0 adds default Bubblewrap sandboxing on Linux, a tap-trust opt-in system, and an OSV-based `brew vulns` vulnerability scanner

Researchers found five malicious skills on ClawHub—OpenClaw’s AI skill marketplace—delivering macOS infostealers, evading scanners with file padding, and using novel agentic affiliate and front-running schemes. Despite VirusTotal and ClawScan integration, these skills slipped through until researchers reported and had them removed. ClawHub now works with NVIDIA and Palo Alto Networks to strengthen screening and analysis.

• Even after ClawHub added VirusTotal and ClawScan screening, five malicious skills still slipped through as of the April–May review, including macOS infostealers, a scanner-evading padded package, and two that manipulated the agent itself for financial gain (affiliate link injection and trade front-running).
• The "cluw" infostealer delivered via fake TradingView assistants passed ClawHub's automated audit (marked "Pass" or left unrated), showing the scanning pipeline's blind spots.
• Independent researchers found much broader contamination: Bitdefender flagged 17% of early skills as malicious, Koi Security identified 341 bad packages, and Trend Micro linked campaigns to the established Atomic macOS Stealer (AMOS).
• ClawHub only removed the five skills and banned accounts after external researcher notification, then brought in NVIDIA for code-behavior analysis on new submissions going forward.