ChainThink reports that on March 10, according to 23pds, Chief Information Security Officer at SlowMist, a threat intelligence system has detected a malicious npm package named "@openclaw-ai/openclawai" executing a multi-layered attack. The malicious package impersonates a legitimate command-line tool called OpenClaw Installer, aiming to steal users' sensitive information, including system credentials, cryptocurrency wallet private keys, browser data, SSH keys, and Apple Keychain databases.
SlowMist CISO Warns of Malicious OpenClaw Installer Stealing Wallet Private Keys and System Credentials
ChainthinkShare
Summary
On March 10, 2026, SlowMist CISO 23pds reported a malicious npm package named '@openclaw-ai/openclawai' that is stealing wallet private keys and system credentials. The package impersonates the OpenClaw Installer, targeting browser data, SSH keys, and the Apple Keychain. As inflation data remains a key market driver, this incident heightens the urgency surrounding cryptocurrency news. Users are advised to verify the sources of packages before installation.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.