npm scope
@openclaw-cn
LPM Firewall blocks 4 packages in the @openclaw-cn npm scope.
Jun 30, 2026
@openclaw-cn/cli@1.4.1
MalwareOSV/OpenSSF confirms @openclaw-cn/cli@1.4.1 as malicious package MAL-2026-3841. Malicious code in @openclaw-cn/cli (npm)
Jun 30, 2026
@openclaw-cn/feishu@0.2.11
MalwareOSV/OpenSSF confirms @openclaw-cn/feishu@0.2.11 as malicious package MAL-2026-3842. Malicious code in @openclaw-cn/feishu (npm)
Jun 30, 2026
@openclaw-cn/libsignal@2.1.1
MalwareOSV/OpenSSF confirms @openclaw-cn/libsignal@2.1.1 as malicious package MAL-2026-3843. Malicious code in @openclaw-cn/libsignal (npm)
Jun 30, 2026
@openclaw-cn/toutiao-ops@1.2.4
MalwareOSV/OpenSSF confirms @openclaw-cn/toutiao-ops@1.2.4 as malicious package MAL-2026-3844. Malicious code in @openclaw-cn/toutiao-ops (npm)
Each card opens the package page with its evidence and every recorded version.