Wu Shuo learned that according to 23pds, the Chief Information Security Officer of SlowMist Technology, citing MistEye intelligence, caution is needed regarding a malicious npm package named "@openclaw-ai/openclawai." This package disguises itself as a legitimate command-line tool called "OpenClaw Installer," deploying a multi-layer attack chain, suspected of stealing system credentials, encrypt wallet private keys, browser data, SSH keys, and Apple Keychain database and other sensitive information.