Malicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS Credentials

A malicious npm package named @openclaw-ai/openclawai was discovered posing as an OpenClaw installer to deploy a RAT and steal sensitive macOS data, tracked as GhostClaw by JFrog.

• •The package uses a postinstall hook to reinstall itself globally and display a fake CLI installer with animated progress bars to deceive users.
• •A bogus iCloud Keychain prompt tricks users into entering their system password, which is then used to decrypt macOS Keychain and browser credentials.
• •An encrypted second-stage JavaScript payload (~11,700 lines) is fetched from a C2 server and acts as a full-fledged infostealer and RAT framework.
• •Stolen data includes macOS Keychain, browser credentials, crypto wallet seeds, SSH keys, cloud credentials (AWS, Azure, GCP, Kubernetes), and AI agent configs.
• •