掃碼下載
BTC $65,674.00 +1.91%
ETH $1,717.28 +2.25%
BNB $616.02 +1.16%
XRP $1.19 +3.14%
SOL $71.04 +3.24%
TRX $0.3207 +1.60%
DOGE $0.0887 +1.16%
ADA $0.1807 +4.98%
BCH $211.02 +1.51%
LINK $8.18 +3.05%
HYPE $65.17 +8.20%
AAVE $69.06 +3.16%
SUI $0.7975 +4.20%
XLM $0.1893 +1.95%
ZEC $488.00 +16.15%
BTC $65,674.00 +1.91%
ETH $1,717.28 +2.25%
BNB $616.02 +1.16%
XRP $1.19 +3.14%
SOL $71.04 +3.24%
TRX $0.3207 +1.60%
DOGE $0.0887 +1.16%
ADA $0.1807 +4.98%
BCH $211.02 +1.51%
LINK $8.18 +3.05%
HYPE $65.17 +8.20%
AAVE $69.06 +3.16%
SUI $0.7975 +4.20%
XLM $0.1893 +1.95%
ZEC $488.00 +16.15%

慢霧 CISO:警惕惡意 npm 包 “@openclaw-ai/openclawai”,其竊取加密錢包私鑰及系統憑證

2026-03-10 11:55:45
收藏

ChainCatcher 消息,据慢霧科技首席信息安全官 23pds 披露,情報系統發現名為 "@openclaw-ai/openclawai" 的惡意 npm 包正在實施多層攻擊。

該惡意包偽裝成名為 OpenClaw Installer 的合法命令行工具,旨在竊取用戶敏感信息,包括系統憑證、加密錢包私鑰、瀏覽器數據、SSH 密鑰以及 Apple Keychain 數據庫等。

app_icon
ChainCatcher 與創新者共建Web3世界