The OpenClaw case establishes a new pattern for open source AI risk: viral adoption is itself the vulnerability. The project crossed 180,000 GitHub stars in January 2026 — the fastest-growing repo in GitHub history — and that very momentum meant security review had no chance of keeping pace with deployment. By the time the OpenClaw crisis was documented as a multi-vector enterprise threat, 30,000 to 42,000 instances were already internet-exposed, 93% without authentication. The community that celebrated the democratization of local AI agents had, in practice, deployed an unauthenticated attack…