Post

@taggart-tech.com

This is a big deal. Already seeing evidence of this by way of OpenClaw installations. opensourcemalware.co... www.stepsecurity.io/...

opensourcemalware.comOne of the most popular JavaScript packages on earth Axios has been compromisedThe Axios NPM package has been compromised and the maintainer of the project has been locked out of their account. This will go down in history as one of the most successful software supply chain attacks ever

31/3/26, 4:49 am23 reposts36 likes

@taggart-tech.com

The malware has been pulled by NPM, but because of the package version, Defender and other endpoint security tools may alert on OpenClaw installations as of right now. github.com/openclaw/ope...

github.com[Bug]: Running official install command triggers Windows Defender - malicious batch file and registry keys added · Issue #58140 · openclaw/openclawBug type Behavior bug (incorrect output/state without crash) Beta release blocker No Summary When running the official installation command from https://openclaw.ai, malicious changes are made to y...