According to 1M AI News monitoring, the official OpenClaw plugin ClawBot, launched by WeChat last weekend, became completely inoperable just 72 hours after its release. This failure was caused by a plugin system refactor in the OpenClaw 2026.3.22 version. In this update, OpenClaw removed the original unified entry point `openclaw/plugin-sdk` and mandated plugins to use segmented paths (e.g., `openclaw/plugin-sdk/core`) for on-demand loading, without providing any compatibility transition solutions. The official statement claims this move aims to improve startup speed, reduce memory usage, and patch cross-package escape vulnerabilities that could be exploited by malicious plugins through old interfaces. The WeChat ClawBot plugin, having hardcoded the old path in its code, directly reported an error "Cannot find module 'openclaw/plugin-sdk'" after the update, rendering it unable to load. Plugins for enterprise WeChat, Feishu, and other chat applications were also affected. OpenClaw also displayed a "WARNING: Dangerous Code Patterns" warning for these plugins, indicating potential credential harvesting risks from the combination of environment variable access and network sending. QQ Bot plugins have not been affected so far and continue to function normally. WeChat has responded, stating they will update and fix the issue as soon as possible, and that only users who have upgraded to the latest version of OpenClaw are currently affected. Community opinions on this matter are divided: some criticize WeChat for not being familiar with the iteration pace of the open-source ecosystem, while others point out that OpenClaw's API design itself is not stable enough, and that the usual responsible practice is to first mark old interfaces as "deprecated" and retain a transition period before removal.
All Comments