BTC $81,211.55 -2.49%
ETH $2,389.67 -2.34%
BNB $732.26 -1.54%
XRP $1.31 -2.84%
SOL $103.90 -2.10%
TRX $0.3288 -0.41%
DOGE $0.0789 -2.52%
ADA $0.2135 -4.21%
BCH $278.38 -1.59%
LINK $12.02 -3.24%
HYPE $77.54 -3.05%
AAVE $147.16 -3.32%
SUI $0.9784 -3.37%
XLM $0.1757 -3.40%
ZEC $1,214.31 -7.13%
AAPL $347.67 +1.01%
AMZN $250.64 -4.00%
GOOGL $324.58 -2.46%
MSFT $519.20 -2.23%
META $646.02 -9.20%
NVDA $213.78 -2.52%
TSLA $375.33 +0.86%
SNDK $1,257.97 -6.45%
INTC $86.24 -4.57%
SPCX $147.22 -6.01%
MU $861.06 -3.88%
AMD $512.90 -4.93%
BTC $81,211.55 -2.49%
ETH $2,389.67 -2.34%
BNB $732.26 -1.54%
XRP $1.31 -2.84%
SOL $103.90 -2.10%
TRX $0.3288 -0.41%
DOGE $0.0789 -2.52%
ADA $0.2135 -4.21%
BCH $278.38 -1.59%
LINK $12.02 -3.24%
HYPE $77.54 -3.05%
AAVE $147.16 -3.32%
SUI $0.9784 -3.37%
XLM $0.1757 -3.40%
ZEC $1,214.31 -7.13%
AAPL $347.67 +1.01%
AMZN $250.64 -4.00%
GOOGL $324.58 -2.46%
MSFT $519.20 -2.23%
META $646.02 -9.20%
NVDA $213.78 -2.52%
TSLA $375.33 +0.86%
SNDK $1,257.97 -6.45%
INTC $86.24 -4.57%
SPCX $147.22 -6.01%
MU $861.06 -3.88%
AMD $512.90 -4.93%

慢雾 CISO:警惕恶意 npm 包 “@openclaw-ai/openclawai”,其窃取加密钱包私钥及系统凭证

2026-03-10 11:55:45

ChainCatcher 消息,据慢雾科技首席信息安全官 23pds 披露,情报系统发现名为 “@openclaw-ai/openclawai” 的恶意 npm 包正在实施多层攻击。

该恶意包伪装成名为 OpenClaw Installer 的合法命令行工具,旨在窃取用户敏感信息,包括系统凭证、加密钱包私钥、浏览器数据、SSH 密钥以及 Apple Keychain 数据库等。

app_icon
ChainCatcher 与创新者共建Web3世界