Malware GhostClaw steals developers' encrypted wallet data through npm packages
According to Cryptopolitan, a new type of malware called GhostClaw is targeting cryptocurrency wallets on macOS devices.
This malware disguised itself as a legitimate OpenClaw CLI tool and was present in the npm registry for a week before being removed after infecting 178 developers. Once developers run the "npm install" command, a hidden script globally installs the GhostClaw package and evades detection through obfuscated configuration files. GhostClaw scans the clipboard every three seconds, capturing private keys, seed phrases, public keys, and other cryptocurrency wallet and transaction-related data.
After the second stage payload is downloaded, GhostLoader scans for cryptocurrency wallet data in the Chromium browser, macOS Keychain, and system storage, clones browser sessions to gain access to logged-in wallets, and steals API Tokens that connect to AI platforms such as OpenAI and Anthropic. The stolen data is sent to the attackers via Telegram, GoFile, and command servers.
You may also like

Who Pays for War? | Rewire News Morning Digest

Oil Price Surges Above $100, Yield Curve Inverts: U.S. Bonds Have Already Told the Market What Is Coming

Apple at 50: The Departure of Genius, the Permanence of the Machine

Disruption in the 13-week consecutive buying spree, What is the Strategy's Intent?

Global Economic Recession: Has It Quietly Begun?

CoinShares 2026 Report: Have Bitcoin Miners Reached Their Toughest Moment?

The cryptocurrency project World, founded by OpenAI's founder, has raised $67 million in funding, yet still struggles with growth challenges

Morning News | American Bitcoin's BTC holdings have surpassed 7,000; Midas completes $50 million Series A financing; Upbit's parent company Dunamu announces 2025 revenue

A plunge of over 97% continues to unlock, yet WLD has completed $65 million in over-the-counter financing: who is still footing the bill?

Potential Bitcoin Crash Below $60K May Delay Recovery to 2027
Key Takeaways: Bitcoin’s deep drawdown phase may extend recovery to the second quarter of 2027. Historical data shows…

BTC USD Price Drops Below $67K Amid Rising Treasury Yields
Key Takeaways: BTC USD slumped to $66,300, its first drop below $67K since March 9, driven by macroeconomic…

Second Bill Targets Insider Trading in Prediction Markets
Key Takeaways: The Public Integrity in Financial Prediction Markets Act of 2026 prohibits government officials from using insider…

India Apprehends Key Figure in Myanmar Crypto Fraud Complex
Key Takeaways: India’s Central Bureau of Investigation (CBI) arrested a key player in a scam that trafficked Indian…

Bitcoin and Profit Metrics: Will History Repeat Itself?
Key Takeaways: Historical patterns reveal that when Bitcoin’s supply in profit falls below 50%, significant price rallies ensue.…

Bitcoin ‘Compression’ Outcome Could Propel BTC Towards $80K: An Analyst’s Perspective
Key Takeaways: Bitcoin’s price is testing a critical $71,500 level, hinting at a possible rally to $80,000. Traders…

Data Points to Accelerating Ether Supply Crunch: Will ETH Price Follow?
Key Takeaways: As of now, 33.1% of Ethereum’s circulating supply is staked, resulting in a tighter liquid supply.…

XRP Risk-Reward Improves as Whale Accumulation Surges: Will the Price Mirror This Trend?
Key Takeaways: XRP’s Sharpe Ratio turned positive on March 26, 2026, indicating a potential for returns outweighing associated…

Cryptocurrency Price Predictions for March 27: BTC, ETH, BNB, XRP, SOL, DOGE, HYPE, ADA, BCH, and LINK
Key Takeaways: Bitcoin is struggling to maintain its position above the $66,000 threshold, amplifying concerns of a further…
