https://blog.0xlulu.com/tags/npm/Recent content in Npm on 鲁鲁修的AI笔记Hugo -- 0.157.0zhTue, 10 Mar 2026 20:13:00 +0800https://blog.0xlulu.com/posts/ghostclaw-malicious-npm-warning/Tue, 10 Mar 2026 20:13:00 +0800https://blog.0xlulu.com/posts/ghostclaw-malicious-npm-warning/JFrog Security 与 MistEye 情报联合披露：恶意 npm 包 @openclaw-ai/openclawai 冒充 OpenClaw 安装器，实施凭证窃取与远程控制攻击。