Malicious npm package '@openclaw-ai/openclawai' downloaded 178 times installs GhostLoader RAT, stealing credentials and crypto wallets.
Unwitting victims are now being tricked into installing malware via Windows Terminal, but some experts say this is old news.
Techniques so absurdly simple, you'll curse all the code you wrote without them.