TechFlow reports that on March 10, 23pds, Chief Information Security Officer at SlowMist Technology, disclosed that the intelligence system detected a malicious npm package named “@openclaw-ai/openclawai” conducting a multi-layered attack. This malicious package masquerades as a legitimate command-line tool called OpenClaw Installer, aiming to steal users’ sensitive information—including system credentials, cryptocurrency wallet private keys, browser data, SSH keys, and Apple Keychain databases.
Add to Favorites
Share to Social Media
