Diamond Member ThaHaka 0 Posted March 9 Diamond Member Share Posted March 9 This is the hidden content, please Sign In or Sign Up Cybersecurity researchers have discovered a malicious npm package that masquerades as an OpenClaw installer to deploy a remote access ******* (RAT) and steal sensitive data from compromised hosts. The package, named "@openclaw-ai/openclawai," was uploaded to the registry by a user named "openclaw-ai" on March 3, 2026. It has been downloaded 178 times to date. The library is still available for This is the hidden content, please Sign In or Sign Up 0 Quote Link to comment https://hopzone.eu/forums/topic/304076-h4ckn3wsmalicious-npm-package-posing-as-openclaw-installer-deploys-rat-steals-macos-credentials/ Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.