BTC $84,756.12 -0.03%
ETH $2,682.76 -0.60%
BNB $773.23 +0.13%
XRP $1.50 -0.03%
SOL $119.59 +1.10%
TRX $0.3361 +0.25%
DOGE $0.0945 -0.40%
ADA $0.2499 +0.05%
BCH $309.37 +0.26%
LINK $14.13 -1.23%
HYPE $88.76 +1.23%
AAVE $183.08 +7.14%
SUI $1.15 -1.85%
XLM $0.2191 -0.33%
ZEC $1,365.31 +0.47%
AAPL $333.42 +1.32%
AMZN $251.10 +0.85%
GOOGL $343.91 +1.34%
MSFT $514.90 -0.07%
META $728.51 +0.04%
NVDA $234.65 +1.76%
TSLA $371.90 +4.44%
SNDK $1,721.56 -3.75%
INTC $120.23 -0.61%
SPCX $158.37 +5.56%
MU $1,078.08 -0.99%
AMD $631.51 +2.65%
BTC $84,756.12 -0.03%
ETH $2,682.76 -0.60%
BNB $773.23 +0.13%
XRP $1.50 -0.03%
SOL $119.59 +1.10%
TRX $0.3361 +0.25%
DOGE $0.0945 -0.40%
ADA $0.2499 +0.05%
BCH $309.37 +0.26%
LINK $14.13 -1.23%
HYPE $88.76 +1.23%
AAVE $183.08 +7.14%
SUI $1.15 -1.85%
XLM $0.2191 -0.33%
ZEC $1,365.31 +0.47%
AAPL $333.42 +1.32%
AMZN $251.10 +0.85%
GOOGL $343.91 +1.34%
MSFT $514.90 -0.07%
META $728.51 +0.04%
NVDA $234.65 +1.76%
TSLA $371.90 +4.44%
SNDK $1,721.56 -3.75%
INTC $120.23 -0.61%
SPCX $158.37 +5.56%
MU $1,078.08 -0.99%
AMD $631.51 +2.65%

慢雾 CISO:悪意のある npm パッケージ “@openclaw-ai/openclawai” に警戒せよ、これは暗号ウォレットの秘密鍵やシステムの証明書を盗む。

2026-03-10 11:55:45

据慢雾科技首席信息安全官 23pds 披露,情报系统发现名为 "@openclaw-ai/openclawai" 的恶意 npm 包正在实施多层攻击。

该恶意包伪装成名为 OpenClaw Installer 的合法命令行工具,旨在窃取用户敏感信息,包括系统凭证、加密钱包私钥、浏览器数据、SSH 密钥以及 Apple Keychain 数据库等。

app_icon
ChainCatcher Building the Web3 world with innovations.