Slow Fog CISO: Beware of the malicious npm package "@openclaw-ai/openclawai," which steals cryptocurrency wallet private keys and system credentials

By: rootdata|2026/03/10 12:43:41

0

Share

copy

According to 23pds, the Chief Information Security Officer of Slow Fog Technology, an intelligence system has discovered a malicious npm package named "@openclaw-ai/openclawai" that is implementing a multi-layer attack.

This malicious package disguises itself as a legitimate command-line tool called OpenClaw Installer, aimed at stealing sensitive user information, including system credentials, cryptocurrency wallet private keys, browser data, SSH keys, and Apple Keychain database, among others.

-- Price

You may also like

WEEX AI Hackathon Champions Crowned, Revealing Future of AI Trading

WEEX AI Hackathon Champions Crowned, Revealing Future of AI Trading

The first-ever WEEX AI Hackathon has concluded, with 10 winners emerging from over 200 global teams. Beyond its $1.8 million prize pool, the event marked a milestone—proving that the future of AI trading belongs to accessible, AI-powered innovation.

View: No Hype, No FUD, I Rate OpenClaw at 65 Points

View: No Hype, No FUD, I Rate OpenClaw at 65 Points

If you approach lobster with a "get rich quick" or "lead Web 4.0" mindset, you will surely be disappointed.

Single-day Oil Price Plunge Exceeds 30%, Copilot Cowork Feature Launched, What Is the English-Speaking Community Talking About Today?

Single-day Oil Price Plunge Exceeds 30%, Copilot Cowork Feature Launched, What Is the English-Speaking Community Talking About Today?

What Have Foreigners Been Most Interested in the Last 24 Hours?

The Agent Spend Safely thing has already taken off

The Agent Spend Safely thing has already taken off

Every shift in platform paradigm brings forth a new wave of merchants that existing payment systems cannot cater to.

After the rise in the stablecoin's status, long-time partners Circle and Stripe vie for dominance

After the rise in the stablecoin's status, long-time partners Circle and Stripe vie for dominance

A Stablecoin On-Chain "Middle Path Encounter".

WEEX Trade to Earn: Turn Futures Trading into Instant WXT Rewards

WEEX Trade to Earn: Turn Futures Trading into Instant WXT Rewards

Join WEEX Trade to Earn and earn instant WXT rebates on every futures trade. Boost rewards with referrals and tasks. Trade more, earn more on WEEX exchange.

Trading Everything, Never Closing: RWA Perpetual Contracts (Part 1)

Trading Everything, Never Closing: RWA Perpetual Contracts (Part 1)

RWA perpetual contracts are trying to disrupt the traditional financial markets of costly zero-day options (0DTE) and opaque contracts for difference (CFD) with transparent on-chain "linear leverage."

Morning News | Nscale completes $2 billion Series C funding; 20 millionth Bitcoin has been mined; Polymarket will launch S&P 500 binary options products

Morning News | Nscale completes $2 billion Series C funding; 20 millionth Bitcoin has been mined; Polymarket will launch S&P 500 binary options products

Overview of Important Market Events on March 9

Dialogue between Vitalik and Suji: Why have decentralized social products failed?

Dialogue between Vitalik and Suji: Why have decentralized social products failed?

Analyzing the dilemma of decentralized social networks should start from "solving social problems" rather than "overlaying crypto finance," exploring new opportunities for the integration of AI and prediction markets.

Trading Never Sleeps: On-Chain, Crude Oil, and Leverage

Trading Never Sleeps: On-Chain, Crude Oil, and Leverage

The prices in this window are determined by emotions, amplified by leverage, driven by the narrative of war—rather than by the supply and demand of crude oil.

On-chain Yield Panorama: The Evolution from Interest-bearing Stablecoins to Crypto Credit Products

On-chain Yield Panorama: The Evolution from Interest-bearing Stablecoins to Crypto Credit Products

In a bear market, investors tend to prefer more stable returns and lower underlying risks, which has driven the growth of interest-bearing stablecoins.

RootData announced the integration with OpenClaw, and these gameplay features have gone viral

RootData announced the integration with OpenClaw, and these gameplay features have gone viral

In the era of AI Agents, the value of data lies not in "ownership," but in "connection."

Key Market Intelligence on March 9th, how much did you miss out on?

Key Market Intelligence on March 9th, how much did you miss out on?

1. On-chain Funds: $221M flowed into Hyperliquid last week; $186.7M flowed out of Arbitrum 2. Largest Price Swings: $DENT, $UAI 3. Top News: Middle East Conflict Sparks Stagflation Trading, Global Stock Markets Shed Around $6 Trillion

a16z: After AI Superpowers, Where to Next for Humanity?

a16z: After AI Superpowers, Where to Next for Humanity?

Cryptocurrency will become the cornerstone of trust in this new era.

Why Does Oil Go Up When Bitcoin Goes Down?

Why Does Oil Go Up When Bitcoin Goes Down?

The Impact of Middle Eastern Oil on Bitcoin Price

Decoding 112,000 Polymarket Addresses: The Top 1% Making Money Are Doing These Five Things

Decoding 112,000 Polymarket Addresses: The Top 1% Making Money Are Doing These Five Things

Those loss-making addresses are not stupid, just lacking discipline — too many markets involved, overexposure, excessive FOMO, and hardly any post-mortem.

AAVE founder issues a warning: DeFi must never become the exit liquidity for Wall Street private credit

AAVE founder issues a warning: DeFi must never become the exit liquidity for Wall Street private credit

In order for RWA to succeed in DeFi and for DeFi to achieve meaningful scale expansion through real-world assets, the entire industry needs to thoughtfully and cautiously build opportunities that connect TradFi (traditional finance) and on-chain markets.

The cryptocurrency industry has waited for five and a half years, and what they got is half a ticket

The cryptocurrency industry has waited for five and a half years, and what they got is half a ticket

The hand that opens this door is not the rule, but the direction of the wind.

WEEX AI Hackathon Champions Crowned, Revealing Future of AI Trading

The first-ever WEEX AI Hackathon has concluded, with 10 winners emerging from over 200 global teams. Beyond its $1.8 million prize pool, the event marked a milestone—proving that the future of AI trading belongs to accessible, AI-powered innovation.

View: No Hype, No FUD, I Rate OpenClaw at 65 Points

If you approach lobster with a "get rich quick" or "lead Web 4.0" mindset, you will surely be disappointed.

Single-day Oil Price Plunge Exceeds 30%, Copilot Cowork Feature Launched, What Is the English-Speaking Community Talking About Today?

What Have Foreigners Been Most Interested in the Last 24 Hours?

The Agent Spend Safely thing has already taken off

Every shift in platform paradigm brings forth a new wave of merchants that existing payment systems cannot cater to.

After the rise in the stablecoin's status, long-time partners Circle and Stripe vie for dominance

A Stablecoin On-Chain "Middle Path Encounter".

WEEX Trade to Earn: Turn Futures Trading into Instant WXT Rewards

Join WEEX Trade to Earn and earn instant WXT rebates on every futures trade. Boost rewards with referrals and tasks. Trade more, earn more on WEEX exchange.

Popular coins

Latest Crypto News

14:01

Hefei High-tech Zone in China officially releases the draft of "15 Measures for Crayfish Farming" for public comments, with a maximum subsidy of 10 million yuan

BlockBeats News, March 10th. According to ChainNews, Hefei High-tech Zone in Anhui Province, China, recently officially released the "Action Plan for Building the Hefei High-tech Zone into an Artificial Intelligence OPC Entrepreneurship Ecological Demonstration Zone (Consultation Draft)," introducin...

14:01

The new address invested $7,600, predicting "In March, another country will attack Iran."

According to PolyBeats Monitoring, in the prediction market Polymarket, over the past day, a new address has been consistently buying $7.6k worth of "Another country will strike Iran in March," with an average entry price of 47.8¢ and a current price of 38.5¢.The Guardian reported yesterday that U.S...

14:01

Riding the Wave of Commodity Trading Boom, Hyperliquid Platform Sees Weekly ROI Surge Over 60%

BlockBeats News, March 10th. On February 28th, the US suddenly took military action against Iran. As this occurred over the weekend when traditional markets were closed, on-chain gold products perfectly met traders' demand for trading in response to the event. Similarly, last weekend, with the closu...

13:43

BlockSec: The BSC chain MT token purchase limit mechanism has a flaw, allowing hackers to arbitrage approximately $242,000

According to BlockSec monitoring, its system detected a suspicious transaction targeting the MT-WBNB liquidity pool on BSC, with an estimated loss of approximately $242,000. The reason lies in a flaw in the buyer restriction mechanism: under deflationary mode, normal buying operations are reverted, ...

13:43

Data: The government of the Kingdom of Bhutan transferred 175 BTC, worth 11.85 million USD

According to CoinDesk, the government of the Kingdom of Bhutan has transferred 175 BTC, worth 11.85 million dollars. The country currently still holds 5,400 BTC, valued at 374 million dollars.