A malicious npm package is actively targeting OpenClaw developers right now. Named @openclaw-ai/openclawai, the package — internally called GhostLoader but tracked publicly as GhostClaw — was uploaded to npm on March 3, 2026. Security researchers at JFrog confirmed it was still live as of March 8. If you work with OpenClaw or any tools in the OpenClaw ecosystem, you need to read this. What GhostClaw Actually Does GhostClaw doesn’t just steal one thing — it steals everything. Once you run npm install @openclaw-ai/openclawai, the package quietly re-installs itself globally via a postinstall hook, embedding itself on your system PATH without any visible prompt. ...

What if social media wasn’t designed for humans? That question — half thought experiment, half provocation — turned out to be the founding premise of Moltbook, a platform that went viral for all the wrong reasons and just landed in the hands of the most powerful social company on Earth. Meta confirmed Tuesday that it has acquired Moltbook, joining it to Meta Superintelligence Labs (MSL). Terms were not disclosed, but co-founders Matt Schlicht (CEO) and Ben Parr (COO) are joining Meta’s team as part of the deal. ...

A new open-source tool called Paperclip is trying to answer a question that’s becoming increasingly urgent as AI agents proliferate: once you have a dozen agents running, how do you manage them like an actual organization? Paperclip’s answer: give them org charts, budgets, ticketing systems, approval workflows, and audit trails. Treat the agent fleet like a company. What Paperclip Does Paperclip sits on top of any OpenClaw-compatible agent and gives it organizational context. You define agent roles — a Research Agent, a Finance Agent, a Customer Support Agent — and Paperclip handles the coordination layer: who delegates to whom, what budget each agent can spend before stopping for approval, what gets logged, and what gets escalated. ...

When Andrej Karpathy drops something on a Sunday night, the ML world stops scrolling. This past weekend, the former Tesla AI lead, OpenAI co-founder, and man who coined “vibe coding” posted a 630-line Python script called autoresearch — and by Monday morning it had 8.6 million views on X and was being distributed across builder networks worldwide. The pitch is deceptively simple: give an AI agent a training script, a GPU, and a compute budget, then go to sleep. Wake up to hundreds of completed experiments. ...

Anthropic filed a federal lawsuit against the US Department of Defense on Monday, March 9, challenging the Pentagon’s formal designation of the company as a “supply-chain risk” — a sanction that could cost the AI startup hundreds of millions in federal contract revenue and effectively lock Claude out of the US government. How It Got Here The dispute traces back to a very specific and principled refusal. CEO Dario Amodei declined to permit Claude to be used for autonomous weapons systems — a position Anthropic has held publicly for years as a core safety commitment. That refusal escalated through weeks of increasingly public tension, culminating last week when the Pentagon formally sanctioned Anthropic under supply-chain risk provisions. ...

OpenClaw version 2026.3.8 is out, and it’s a substantive release. More than two dozen fixes land across all platforms, with the headline features addressing three pain points that have frustrated OpenClaw users since at least the previous major version: missing local backup tooling, unreliable gateway restarts on macOS, and fragile API key exposure in logs. New: Local Backup CLI The biggest new feature is the backup command pair: openclaw backup create openclaw backup verify backup create produces a local snapshot of your agent state, configuration, and critical data. backup verify checks the integrity of an existing backup without restoring it — useful for scheduled validation in production setups. ...

The irony is perfect: AI is now reviewing the code that AI writes. Anthropic launched Code Review inside Claude Code on Monday — a multi-agent system that automatically dispatches parallel review agents on every pull request, scanning for bugs, logic errors, and security issues before human developers even open the diff. This isn’t just a quality-of-life feature. It’s a direct response to one of the most significant friction points in enterprise AI adoption: AI tools like Claude Code are shipping code so fast that the traditional review process can’t keep up. ...

Not every major agentic AI story is about OpenAI or Anthropic. On Monday, Dify — the open-source visual workflow builder for AI agents — announced a $30 million Series Pre-A funding round led by HSG at a valuation of approximately $180 million. This is a category-validation story as much as it’s a company milestone. Dify’s raise signals that the enterprise market has moved beyond “should we use AI agents?” to “how do we build and manage them reliably at scale?” ...

Eighty percent of Fortune 500 companies are already running AI agents inside their organizations. Nearly a third of those agents weren’t officially sanctioned by IT. That’s the uncomfortable statistic Microsoft dropped Monday as it announced the general availability of Agent 365 — a $15/user/month control plane designed to govern the growing population of AI agents operating inside enterprise environments before they become what VentureBeat memorably called “corporate double agents.” The Problem Agent 365 Solves AI agents have crossed from experimental to operational. They’re filing tickets, managing calendars, writing code, processing invoices, and increasingly taking actions with real business consequences. Most organizations deployed them faster than they built governance frameworks around them. ...

Nvidia has quietly been pitching something significant to enterprise software companies ahead of its GTC 2026 conference next week: an open-source AI agent platform called NemoClaw that lets companies dispatch AI agents across their workforce — regardless of whether those products run on Nvidia hardware. That last part is the headline. Nvidia building hardware-agnostic software is a deliberate strategic move, and it signals that the GPU giant is serious about owning the enterprise agent software layer, not just the silicon underneath it. ...