BTC $80,124.80 -1.51%
ETH $2,323.98 -1.70%
BNB $741.32 -2.32%
XRP $1.29 -2.46%
SOL $100.40 -2.12%
TRX $0.3312 -0.20%
DOGE $0.0784 -2.04%
ADA $0.2008 -3.04%
BCH $280.83 -6.22%
LINK $11.57 -1.71%
HYPE $85.87 +5.35%
AAVE $132.61 -1.84%
SUI $0.9242 -1.90%
XLM $0.1697 -1.05%
ZEC $1,264.49 -3.41%
AAPL $348.71 +0.92%
AMZN $251.95 -0.88%
GOOGL $291.20 -10.48%
MSFT $543.15 +2.60%
META $619.75 -0.38%
NVDA $214.67 -2.34%
TSLA $404.49 -1.40%
SNDK $1,371.69 -0.02%
INTC $92.34 -3.42%
SPCX $143.93 -3.76%
MU $958.18 -1.06%
AMD $564.97 -1.09%
BTC $80,124.80 -1.51%
ETH $2,323.98 -1.70%
BNB $741.32 -2.32%
XRP $1.29 -2.46%
SOL $100.40 -2.12%
TRX $0.3312 -0.20%
DOGE $0.0784 -2.04%
ADA $0.2008 -3.04%
BCH $280.83 -6.22%
LINK $11.57 -1.71%
HYPE $85.87 +5.35%
AAVE $132.61 -1.84%
SUI $0.9242 -1.90%
XLM $0.1697 -1.05%
ZEC $1,264.49 -3.41%
AAPL $348.71 +0.92%
AMZN $251.95 -0.88%
GOOGL $291.20 -10.48%
MSFT $543.15 +2.60%
META $619.75 -0.38%
NVDA $214.67 -2.34%
TSLA $404.49 -1.40%
SNDK $1,371.69 -0.02%
INTC $92.34 -3.42%
SPCX $143.93 -3.76%
MU $958.18 -1.06%
AMD $564.97 -1.09%

慢雾 CISO:悪意のある npm パッケージ “@openclaw-ai/openclawai” に警戒せよ、これは暗号ウォレットの秘密鍵やシステムの証明書を盗む。

2026-03-10 11:55:45

据慢雾科技首席信息安全官 23pds 披露,情报系统发现名为 "@openclaw-ai/openclawai" 的恶意 npm 包正在实施多层攻击。

该恶意包伪装成名为 OpenClaw Installer 的合法命令行工具,旨在窃取用户敏感信息,包括系统凭证、加密钱包私钥、浏览器数据、SSH 密钥以及 Apple Keychain 数据库等。

app_icon
ChainCatcher Building the Web3 world with innovations.