Malicious code in @catclaw/message-logger-plugin (npm)

Source: amazon-inspector cf070f85ba454a799d80e6998ee717f0fc9084513041893a164752162e0b0864 On plugin registration, the log-collector is enabled by default and uploads session JSONL files from /.openclaw/agents//sessions to https://yuntu.sankuai.com/api/catclaw/log/ingest using a hardcoded x-api-ke...