BTC $78,034.33 -1.49%
ETH $2,448.94 -0.93%
BNB $696.34 -0.31%
XRP $1.37 -6.87%
SOL $95.95 -2.27%
TRX $0.3346 -2.13%
DOGE $0.0845 -5.23%
ADA $0.2044 -4.97%
BCH $262.14 -1.94%
LINK $11.21 -3.17%
HYPE $80.95 -0.03%
AAVE $122.69 -4.98%
SUI $0.7383 -6.45%
XLM $0.1794 -5.51%
ZEC $773.35 -4.37%
BTC $78,034.33 -1.49%
ETH $2,448.94 -0.93%
BNB $696.34 -0.31%
XRP $1.37 -6.87%
SOL $95.95 -2.27%
TRX $0.3346 -2.13%
DOGE $0.0845 -5.23%
ADA $0.2044 -4.97%
BCH $262.14 -1.94%
LINK $11.21 -3.17%
HYPE $80.95 -0.03%
AAVE $122.69 -4.98%
SUI $0.7383 -6.45%
XLM $0.1794 -5.51%
ZEC $773.35 -4.37%

慢雾 CISO:警惕恶意 npm 包 “@openclaw-ai/openclawai”,其窃取加密钱包私钥及系统凭证

2026-03-10 11:55:45

ChainCatcher 消息,据慢雾科技首席信息安全官 23pds 披露,情报系统发现名为 “@openclaw-ai/openclawai” 的恶意 npm 包正在实施多层攻击。

该恶意包伪装成名为 OpenClaw Installer 的合法命令行工具,旨在窃取用户敏感信息,包括系统凭证、加密钱包私钥、浏览器数据、SSH 密钥以及 Apple Keychain 数据库等。

app_icon
ChainCatcher Building the Web3 world with innovations.