Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.
Clawdbot can automate large parts of your digital life, but researchers caution that proven security flaws mean users should stop and listen before trusting it with sensitive systems.