Malicious npm package '@openclaw-ai/openclawai' downloaded 178 times installs GhostLoader RAT, stealing credentials and crypto wallets.
An undefined Chinese-speaking actor wields a combo of custom malware, open source tools, and LOTL binaries against Windows ...