BTC $63,005.96 +0.23%
ETH $1,880.98 +0.18%
BNB $610.32 +0.69%
XRP $1.00 +0.47%
SOL $75.41 +0.41%
TRX $0.3312 -0.38%
DOGE $0.0698 +0.07%
ADA $0.1778 -0.83%
BCH $203.51 +0.07%
LINK $9.56 +6.86%
HYPE $57.03 +2.53%
AAVE $86.56 +1.11%
SUI $0.6800 +0.22%
XLM $0.1577 -0.79%
ZEC $487.84 -0.70%
BTC $63,005.96 +0.23%
ETH $1,880.98 +0.18%
BNB $610.32 +0.69%
XRP $1.00 +0.47%
SOL $75.41 +0.41%
TRX $0.3312 -0.38%
DOGE $0.0698 +0.07%
ADA $0.1778 -0.83%
BCH $203.51 +0.07%
LINK $9.56 +6.86%
HYPE $57.03 +2.53%
AAVE $86.56 +1.11%
SUI $0.6800 +0.22%
XLM $0.1577 -0.79%
ZEC $487.84 -0.70%

慢雾 CISO:悪意のある npm パッケージ “@openclaw-ai/openclawai” に警戒せよ、これは暗号ウォレットの秘密鍵やシステムの証明書を盗む。

2026-03-10 11:55:45

据慢雾科技首席信息安全官 23pds 披露,情报系统发现名为 "@openclaw-ai/openclawai" 的恶意 npm 包正在实施多层攻击。

该恶意包伪装成名为 OpenClaw Installer 的合法命令行工具,旨在窃取用户敏感信息,包括系统凭证、加密钱包私钥、浏览器数据、SSH 密钥以及 Apple Keychain 数据库等。

app_icon
ChainCatcher Building the Web3 world with innovations.