Malicious npm package '@openclaw-ai/openclawai' downloaded 178 times installs GhostLoader RAT, stealing credentials and crypto wallets.
Signal says its systems are secure but it is taking reports of targeted attempts to hack some officials "very seriously".
Hackers are already probing impacted versions of Nginx web server’s user interface, hunting for credentials and encryption keys.