The OpenClaw security problem has two different responses:

Malicious packages need removal.

Vulnerable packages need better engineering.

Treating both the same creates bad responses: panic, overblocking, false confidence, missed remediation

Read the full analysis: https://trent.ai/blog/clawhub-ai-agent-security-analysis/