How to Spot and Avoid Fake OpenClaw npm Packages (GhostClaw and Beyond)
A malicious npm package is actively targeting OpenClaw developers right now. Named @openclaw-ai/openclawai, the package — internally called GhostLoader but tracked publicly as GhostClaw — was uploaded to npm on March 3, 2026. Security researchers at JFrog confirmed it was still live as of March 8. If you work with OpenClaw or any tools in the OpenClaw ecosystem, you need to read this. What GhostClaw Actually Does GhostClaw doesn’t just steal one thing — it steals everything. Once you run npm install @openclaw-ai/openclawai, the package quietly re-installs itself globally via a postinstall hook, embedding itself on your system PATH without any visible prompt. ...