扫码下载
BTC $60,733.30 +0.83%
ETH $1,558.41 -1.23%
BNB $575.72 +0.06%
XRP $1.09 +0.10%
SOL $62.02 -3.34%
TRX $0.3212 +0.29%
DOGE $0.0817 +0.53%
ADA $0.1586 +0.05%
BCH $217.98 +1.37%
LINK $7.38 +1.29%
HYPE $58.54 +1.01%
AAVE $60.21 -0.96%
SUI $0.7171 +4.01%
XLM $0.2066 +11.05%
ZEC $355.57 +9.74%
BTC $60,733.30 +0.83%
ETH $1,558.41 -1.23%
BNB $575.72 +0.06%
XRP $1.09 +0.10%
SOL $62.02 -3.34%
TRX $0.3212 +0.29%
DOGE $0.0817 +0.53%
ADA $0.1586 +0.05%
BCH $217.98 +1.37%
LINK $7.38 +1.29%
HYPE $58.54 +1.01%
AAVE $60.21 -0.96%
SUI $0.7171 +4.01%
XLM $0.2066 +11.05%
ZEC $355.57 +9.74%

慢雾 CISO:警惕恶意 npm 包 “@openclaw-ai/openclawai”,其窃取加密钱包私钥及系统凭证

2026-03-10 11:55:45
收藏

ChainCatcher 消息,据慢雾科技首席信息安全官 23pds 披露,情报系统发现名为 “@openclaw-ai/openclawai” 的恶意 npm 包正在实施多层攻击。

该恶意包伪装成名为 OpenClaw Installer 的合法命令行工具,旨在窃取用户敏感信息,包括系统凭证、加密钱包私钥、浏览器数据、SSH 密钥以及 Apple Keychain 数据库等。

app_icon
ChainCatcher 与创新者共建Web3世界