Scan to download
BTC $66,868.50 +0.05%
ETH $2,052.50 -0.50%
BNB $588.79 +0.96%
XRP $1.32 +0.82%
SOL $80.22 +1.62%
TRX $0.3146 -0.21%
DOGE $0.0917 +1.74%
ADA $0.2477 +3.39%
BCH $441.73 -0.19%
LINK $8.68 +0.92%
HYPE $35.74 +2.27%
AAVE $94.37 -0.42%
SUI $0.8758 +1.89%
XLM $0.1635 -0.50%
ZEC $234.34 -2.80%
BTC $66,868.50 +0.05%
ETH $2,052.50 -0.50%
BNB $588.79 +0.96%
XRP $1.32 +0.82%
SOL $80.22 +1.62%
TRX $0.3146 -0.21%
DOGE $0.0917 +1.74%
ADA $0.2477 +3.39%
BCH $441.73 -0.19%
LINK $8.68 +0.92%
HYPE $35.74 +2.27%
AAVE $94.37 -0.42%
SUI $0.8758 +1.89%
XLM $0.1635 -0.50%
ZEC $234.34 -2.80%

check

Slow Fog: Pay attention to checking for malicious versions of axios and the exposure risk of global installation history for OpenClaw npm

Slow Fog has once again issued a security reminder stating to pay attention to checking for malicious versions of axios and the exposure risk of OpenClaw npm global installation history. [email protected] and [email protected] have been confirmed as malicious versions, both of which have injected the dependency [email protected], delivering cross-platform malicious payloads through the postinstall script.The impact of OpenClaw is assessed based on scenarios: source code builds are not affected, as the locked versions in the lock file are 1.13.5/1.13.6; however, users who installed via npm install -g [email protected] face historical exposure risks due to the presence of optionalDependencies.axios@^1.7.4 in the dependency chain, which may resolve to [email protected] during the time window when the malicious version is still online. Currently, npm has reverted the resolution to [email protected], but environments that were installed during the attack window are still advised to be checked. Slow Fog has provided inspection commands and IoC paths for various platforms; if the plain-crypto-js directory is found, even if the package.json has been cleaned, it should still be regarded as high-risk execution traces. It is recommended that affected hosts immediately rotate credentials and conduct host-side inspections. Previously, Slow Fog founder Yu Xian reminded that OpenClaw version 3.28 may introduce a toxic version of axios, and users need to urgently check.
app_icon
ChainCatcher Building the Web3 world with innovations.