BTC $64,673.72 +0.94%
ETH $1,916.63 +1.14%
BNB $588.67 +3.63%
XRP $1.08 +1.43%
SOL $74.55 +1.72%
TRX $0.3283 +0.62%
DOGE $0.0704 +0.55%
ADA $0.1743 +7.15%
BCH $219.16 +4.36%
LINK $8.48 +2.71%
HYPE $53.77 -2.36%
AAVE $98.40 +0.08%
SUI $0.6965 +1.70%
XLM $0.1719 -0.52%
ZEC $474.29 +2.59%
BTC $64,673.72 +0.94%
ETH $1,916.63 +1.14%
BNB $588.67 +3.63%
XRP $1.08 +1.43%
SOL $74.55 +1.72%
TRX $0.3283 +0.62%
DOGE $0.0704 +0.55%
ADA $0.1743 +7.15%
BCH $219.16 +4.36%
LINK $8.48 +2.71%
HYPE $53.77 -2.36%
AAVE $98.40 +0.08%
SUI $0.6965 +1.70%
XLM $0.1719 -0.52%
ZEC $474.29 +2.59%

慢雾 CISO:悪意のある npm パッケージ “@openclaw-ai/openclawai” に警戒せよ、これは暗号ウォレットの秘密鍵やシステムの証明書を盗む。

2026-03-10 11:55:45
コレクション

据慢雾科技首席信息安全官 23pds 披露,情报系统发现名为 "@openclaw-ai/openclawai" 的恶意 npm 包正在实施多层攻击。

该恶意包伪装成名为 OpenClaw Installer 的合法命令行工具,旨在窃取用户敏感信息,包括系统凭证、加密钱包私钥、浏览器数据、SSH 密钥以及 Apple Keychain 数据库等。

app_icon
ChainCatcher Building the Web3 world with innovations.