BTC $84,489.17 -0.21%
ETH $2,665.98 -1.22%
BNB $766.85 -0.44%
XRP $1.48 -0.62%
SOL $118.51 +0.16%
TRX $0.3346 -0.07%
DOGE $0.0925 -1.75%
ADA $0.2424 -1.39%
BCH $309.12 -0.05%
LINK $13.74 -3.99%
HYPE $88.16 +0.86%
AAVE $180.10 +4.81%
SUI $1.12 -3.88%
XLM $0.2144 -2.07%
ZEC $1,293.13 -3.63%
AAPL $333.44 +0.80%
AMZN $251.28 +0.96%
GOOGL $343.05 +1.04%
MSFT $517.54 +0.43%
META $727.46 +0.12%
NVDA $234.14 +1.09%
TSLA $371.14 +4.38%
SNDK $1,718.41 -3.63%
INTC $119.16 -1.02%
SPCX $158.90 +6.77%
MU $1,071.01 -1.90%
AMD $633.35 +2.55%
BTC $84,489.17 -0.21%
ETH $2,665.98 -1.22%
BNB $766.85 -0.44%
XRP $1.48 -0.62%
SOL $118.51 +0.16%
TRX $0.3346 -0.07%
DOGE $0.0925 -1.75%
ADA $0.2424 -1.39%
BCH $309.12 -0.05%
LINK $13.74 -3.99%
HYPE $88.16 +0.86%
AAVE $180.10 +4.81%
SUI $1.12 -3.88%
XLM $0.2144 -2.07%
ZEC $1,293.13 -3.63%
AAPL $333.44 +0.80%
AMZN $251.28 +0.96%
GOOGL $343.05 +1.04%
MSFT $517.54 +0.43%
META $727.46 +0.12%
NVDA $234.14 +1.09%
TSLA $371.14 +4.38%
SNDK $1,718.41 -3.63%
INTC $119.16 -1.02%
SPCX $158.90 +6.77%
MU $1,071.01 -1.90%
AMD $633.35 +2.55%

慢霧 CISO:警惕惡意 npm 包 “@openclaw-ai/openclawai”,其竊取加密錢包私鑰及系統憑證

2026-03-10 11:55:45

ChainCatcher 消息,据慢霧科技首席信息安全官 23pds 披露,情報系統發現名為 "@openclaw-ai/openclawai" 的惡意 npm 包正在實施多層攻擊。

該惡意包偽裝成名為 OpenClaw Installer 的合法命令行工具,旨在竊取用戶敏感信息,包括系統憑證、加密錢包私鑰、瀏覽器數據、SSH 密鑰以及 Apple Keychain 數據庫等。

app_icon
ChainCatcher 與創新者共建Web3世界