
Axios Poisoned in 2026 NPM Attack: OpenClaw Projects Compromised by Malicious RAT
Axios npm versions 1.14.1 and 0.30.4 were hijacked with a cross-platform RAT via plain-crypto-js. OpenClaw forks like @shadanai/openclaw and @qqbrowser/openclaw-qbot were directly affected. Full technical breakdown and step-by-step remediation.












































