Polyfill supply chain attack that hit more than 100,000 websites has now been linked to North Korean threat actors.
Malicious npm package '@openclaw-ai/openclawai' downloaded 178 times installs GhostLoader RAT, stealing credentials and crypto wallets.