BTC $77,559.45 +0.36%
ETH $2,514.48 -0.32%
BNB $725.27 -0.12%
XRP $1.38 +0.86%
SOL $101.04 -0.77%
TRX $0.3389 -0.18%
DOGE $0.0840 -0.95%
ADA $0.2070 -0.39%
BCH $223.47 -1.15%
LINK $11.38 -1.47%
HYPE $79.63 +0.34%
AAVE $125.82 -1.13%
SUI $0.7174 -1.04%
XLM $0.1827 +1.18%
ZEC $1,135.68 -1.41%
AAPL $329.41 -1.09%
AMZN $254.21 -0.98%
GOOGL $335.50 -1.48%
MSFT $493.61 -0.34%
META $640.20 -1.19%
NVDA $214.96 -1.04%
TSLA $360.12 -1.75%
SNDK $1,563.87 -2.96%
INTC $98.28 -2.81%
SPCX $148.59 -1.07%
MU $938.06 -2.52%
AMD $498.12 -2.54%
BTC $77,559.45 +0.36%
ETH $2,514.48 -0.32%
BNB $725.27 -0.12%
XRP $1.38 +0.86%
SOL $101.04 -0.77%
TRX $0.3389 -0.18%
DOGE $0.0840 -0.95%
ADA $0.2070 -0.39%
BCH $223.47 -1.15%
LINK $11.38 -1.47%
HYPE $79.63 +0.34%
AAVE $125.82 -1.13%
SUI $0.7174 -1.04%
XLM $0.1827 +1.18%
ZEC $1,135.68 -1.41%
AAPL $329.41 -1.09%
AMZN $254.21 -0.98%
GOOGL $335.50 -1.48%
MSFT $493.61 -0.34%
META $640.20 -1.19%
NVDA $214.96 -1.04%
TSLA $360.12 -1.75%
SNDK $1,563.87 -2.96%
INTC $98.28 -2.81%
SPCX $148.59 -1.07%
MU $938.06 -2.52%
AMD $498.12 -2.54%

慢雾 CISO:悪意のある npm パッケージ “@openclaw-ai/openclawai” に警戒せよ、これは暗号ウォレットの秘密鍵やシステムの証明書を盗む。

2026-03-10 11:55:45

据慢雾科技首席信息安全官 23pds 披露,情报系统发现名为 "@openclaw-ai/openclawai" 的恶意 npm 包正在实施多层攻击。

该恶意包伪装成名为 OpenClaw Installer 的合法命令行工具,旨在窃取用户敏感信息,包括系统凭证、加密钱包私钥、浏览器数据、SSH 密钥以及 Apple Keychain 数据库等。

app_icon
ChainCatcher Building the Web3 world with innovations.