A malicious npm bundle impersonating an installer for the Openclaw synthetic intelligence (AI) agent framework is spreading credential-stealing malware designed to quietly take management of developer machines. Safety Researchers Expose Malicious Openclaw npm Package deal Safety researchers say the bundle is a part of a supply-chain assault aimed toward builders working with Openclaw and related AI-agent tooling. […]
Source link












