Powered by the TypesScript-native runtime Bun, Electrobun improves Electron with a smaller application footprint and built-in update mechanisms. Ever since Electron’s first release, developers have ...

近期出现针对软件开发者的高危恶意软件活动，一个名为@openclaw-ai/openclawai的恶意npm包伪装成可信开发者工具，暗中窃取凭证、加密钱包、SSH密钥、浏览器会话乃至iMessage聊天记录。该包自称"OpenClaw Installer"命令行安装程序，实则部署完全在后台运行的深度隐藏感染链。该恶意软件内部自称GhostLoader，但整个活动被追踪命名为GhostClaw。 精 ...

A malicious npm package disguised as a legitimate AI tool to install the virally popular OpenClaw, but designed to steal system passwords and crypto wallets, ...