Frequency
1
occurrences
First Seen
March 20, 2026
Last Seen
March 20, 2026
Related Threat Clusters
-
Malicious npm Package Disguises as OpenClaw to Deploy GhostClaw RAT
A rogue npm package named '@openclaw-ai/openclawai' has been identified as a malicious installer for a remote access trojan (RAT) known as GhostClaw. This malware targets software developers, stealing sensitive…
15 articles · Updated March 10, 2026
Recent Intelligence Reports
- GhostClaw expands beyond npm: GitHub repositories and AI workflows deliver macOS infostealer — Mactech · March 20, 2026