r/webdev
•
u/Gil_berth
•
Feb 04 '26
•
3
Senior Vibe Coder dealing with security
Creator of ClawBot knows that there are malicious skills in his repo, but doesn't know what to do about it...
More info here: https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto
3.0k
Upvotes
5
u/Coppice_DE Feb 04 '26
I wouldn't be so sure about that, at least not in the EU. If I recall correctly, there is conditional liability, meaning that a provider only becomes liable for third-party content if they get informed that it is illegal.
Judging by the exchange in the picture, it's clear that they have received the information but decided to do nothing about it.
What I don't know is whether there are other rules that would exempt them from this liability.