
OpenClaw: the npm package that installs a persistent RAT in macOS and steals data
A malicious package published in the npm record is passed through a legitimate installer called OpenClaw and has been used to deploy a remote access Trojan (RAT) that steals sensi…







