BTC $77,559.45 +0.36%
ETH $2,514.48 -0.32%
BNB $725.27 -0.12%
XRP $1.38 +0.80%
SOL $101.04 -0.77%
TRX $0.3389 -0.18%
DOGE $0.0840 -0.95%
ADA $0.2070 -0.39%
BCH $223.47 -1.15%
LINK $11.38 -1.47%
HYPE $79.79 +0.50%
AAVE $125.82 -1.13%
SUI $0.7174 -1.04%
XLM $0.1827 +1.18%
ZEC $1,135.68 -1.41%
AAPL $329.41 -1.09%
AMZN $254.32 -0.94%
GOOGL $335.50 -1.48%
MSFT $493.34 -0.39%
META $640.20 -1.19%
NVDA $214.91 -1.06%
TSLA $360.05 -1.78%
SNDK $1,562.09 -3.07%
INTC $98.39 -2.70%
SPCX $148.54 -1.10%
MU $936.95 -2.63%
AMD $498.12 -2.54%
BTC $77,559.45 +0.36%
ETH $2,514.48 -0.32%
BNB $725.27 -0.12%
XRP $1.38 +0.80%
SOL $101.04 -0.77%
TRX $0.3389 -0.18%
DOGE $0.0840 -0.95%
ADA $0.2070 -0.39%
BCH $223.47 -1.15%
LINK $11.38 -1.47%
HYPE $79.79 +0.50%
AAVE $125.82 -1.13%
SUI $0.7174 -1.04%
XLM $0.1827 +1.18%
ZEC $1,135.68 -1.41%
AAPL $329.41 -1.09%
AMZN $254.32 -0.94%
GOOGL $335.50 -1.48%
MSFT $493.34 -0.39%
META $640.20 -1.19%
NVDA $214.91 -1.06%
TSLA $360.05 -1.78%
SNDK $1,562.09 -3.07%
INTC $98.39 -2.70%
SPCX $148.54 -1.10%
MU $936.95 -2.63%
AMD $498.12 -2.54%

慢雾 CISO:悪意のある npm パッケージ “@openclaw-ai/openclawai” に警戒せよ、これは暗号ウォレットの秘密鍵やシステムの証明書を盗む。

2026-03-10 11:55:45

据慢雾科技首席信息安全官 23pds 披露,情报系统发现名为 "@openclaw-ai/openclawai" 的恶意 npm 包正在实施多层攻击。

该恶意包伪装成名为 OpenClaw Installer 的合法命令行工具,旨在窃取用户敏感信息,包括系统凭证、加密钱包私钥、浏览器数据、SSH 密钥以及 Apple Keychain 数据库等。

app_icon
ChainCatcher Building the Web3 world with innovations.