🍀 Spring Appointment, Lucky Draw Gifts! Growth Value Issue 1️⃣7️⃣ Spring Lucky Draw Carnival Begins!
Seize Spring Luck! 👉 https://www.gate.com/activities/pointprize?now_period=17
🌟 How to Participate?
1️⃣ Enter [Plaza] personal homepage, click the points icon next to your avatar to enter [Community Center]
2️⃣ Complete plaza or hot chat tasks like posting, commenting, liking, and speaking to earn growth value
🎁 Every 300 points can draw once, 10g gold bars, Gate Red Bull gift boxes, VIP experience cards and more great prizes await you!
Details 👉 https://www.gate.com/announcements/article/
GoPlus:ClawHub 存在下载量伪造漏洞,热门技能或含恶意代码
深潮 TechFlow 消息,03 月 26 日,据 GoPlus Security 发布的安全警告,Silverfort 安全研究人员在 OpenClaw 的技能仓库 ClawHub 中发现严重漏洞。攻击者可通过调用内部函数 downloads:increment 绕过所有防护机制,仅凭一条 curl 请求即可将下载量在数分钟内刷至 2 万次以上,从而将含恶意代码的技能推至搜索排名第一,诱导用户或 AI Agent 自动安装。
恶意技能一旦运行,可窃取加密钱包、API 密钥等敏感数据。目前该漏洞已在 24 小时内完成修复。GoPlus 提示用户,高下载量不等于安全,建议使用 AgentGuard 进行安全扫描与防护。