OpenClaw open-source framework faces supply chain security trust crisis
Malicious typosquatting packages on npm impersonated OpenClaw's official dependencies, exposing supply chain risks in open-source AI frameworks and prompting the team to strengthen security measures.