The module targets Claude Code, Claude Desktop, Cursor, Microsoft Visual Studio Code (VS Code) Continue, and Windsurf. It also harvests API keys for nine large language models (LLM) providers: ...

A self-replicating npm worm dubbed SANDWORM_MODE hits 19+ packages, harvesting private keys, BIP39 mnemonics, wallet files and LLM API keys from dev environments.

Leaked API keys are nothing new, but the scale of the problem in front-end code has been largely a mystery - until now. Intruder's research team built a new secrets detection method and scanned 5 ...

Cline CLI 2.3.0 was published with a stolen npm token, installing OpenClaw in an 8-hour attack affecting ~4,000 downloads.

The malicious version of Cline's npm package — 2.3.0 — was downloaded more than 4,000 times before it was removed.

Bank employees are likely adopting the OpenClaw AI assistant on the sly to boost productivity, but the tool's deep ...

North Korean state-backed hackers are exploiting global technology recruitment channels to plant malware, siphon intellectual property and generate covert revenue, according to multiple cyber security ...

The project's creator nearly deleted the viral AI agent after crypto scammers hijacked his accounts, launched a fake token that hit $16 million, and harassed him for weeks.

OpenClaw developer Peter Steinberger has confirmed a strict no-crypto policy on the project’s Discord following a recent scam ...

Threat actors are targeting technology, manufacturing, and financial organizations in campaigns that combine device code phishing and voice phishing (vishing) to abuse the OAuth 2.0 Device ...

The Dash blockchain network has announced an upcoming integration of Zcash's privacy-preserving features for its Evolution ...