SlowMist has issued a warning regarding a malicious npm package named "@openclaw-ai/openclawai". This package poses as a legitimate command-line tool, OpenClaw Installe, but is designed to execute a multi-layered attack chain. It targets and steals sensitive information, including system credentials, encrypted wallet private keys, browser data, SSH keys, and Apple Keychain databases. Users are advised to exercise caution and verify the authenticity of npm packages before installation.