PANews reported on March 10 that SlowMist issued a warning about a malicious npm package called "@openclaw-ai/openclawai". This package masquerades as a legitimate command-line tool called OpenClaw Installe, deploying a multi-layered attack chain to steal system credentials, encrypted wallet private keys, browser data, SSH keys, Apple Keychain databases, and other information.
SlowMist: Beware of a malicious npm package named "@openclaw-ai/openclawai"
Share to:
Author: PA一线
This content is for market information only and is not investment advice.
Follow PANews official accounts, navigate bull and bear markets together
Recommended Reading
PANews App
24/7 blockchain news tracking and in-depth analysis.