扫码下载
BTC $60,611.75 -0.26%
ETH $1,553.03 -2.58%
BNB $573.50 -1.43%
XRP $1.09 -0.68%
SOL $62.16 -4.56%
TRX $0.3207 -0.70%
DOGE $0.0817 -1.03%
ADA $0.1579 -1.14%
BCH $218.84 +0.44%
LINK $7.38 -0.03%
HYPE $58.28 -4.28%
AAVE $60.88 -1.57%
SUI $0.7141 +1.56%
XLM $0.2019 +7.15%
ZEC $342.26 +1.90%
BTC $60,611.75 -0.26%
ETH $1,553.03 -2.58%
BNB $573.50 -1.43%
XRP $1.09 -0.68%
SOL $62.16 -4.56%
TRX $0.3207 -0.70%
DOGE $0.0817 -1.03%
ADA $0.1579 -1.14%
BCH $218.84 +0.44%
LINK $7.38 -0.03%
HYPE $58.28 -4.28%
AAVE $60.88 -1.57%
SUI $0.7141 +1.56%
XLM $0.2019 +7.15%
ZEC $342.26 +1.90%

慢雾 CISO:警惕恶意 npm 包 “@openclaw-ai/openclawai”,其窃取加密钱包私钥及系统凭证

2026-03-10 11:55:45
收藏

ChainCatcher 消息,据慢雾科技首席信息安全官 23pds 披露,情报系统发现名为 “@openclaw-ai/openclawai” 的恶意 npm 包正在实施多层攻击。

该恶意包伪装成名为 OpenClaw Installer 的合法命令行工具,旨在窃取用户敏感信息,包括系统凭证、加密钱包私钥、浏览器数据、SSH 密钥以及 Apple Keychain 数据库等。

app_icon
ChainCatcher 与创新者共建Web3世界