SlowMist CISO: Beware of malicious npm package "@openclaw-ai/openclawai" that steals crypto wallet private keys and system credentials

2026-03-10 03:56:16

Deep Tide TechFlow News, on March 10, according to 23pds, Chief Information Security Officer of SlowMist Technology, intelligence systems detected a malicious npm package named “@openclaw-ai/openclawai” conducting multi-layer attacks. The malicious package disguises itself as a legitimate command-line tool called OpenClaw Installer, aiming to steal users’ sensitive information, including system credentials, crypto wallet private keys, browser data, SSH keys, and Apple Keychain databases.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.