Malicious npm package '@openclaw-ai/openclawai' downloaded 178 times installs GhostLoader RAT, stealing credentials and crypto wallets.
CUPERTNIO, CA, UNITED STATES, March 10, 2026 /EINPresswire.com/ -- StrongAuth, Inc. (dba StrongKey) announced the ...
New attack waves from the 'PhantomRaven' supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers.