openclaw-upgrade

No clear evidence of intentional malware (no backdoor, exfiltration, reverse shell, or dynamic code execution) in this Bash upgrader. However, it meaningfully expands the supply-chain attack surface by performing global npm/pnpm installs/upgrades (openclaw@channel and conditional installation of `long`) without integrity pinning, and it can delete/reinstall node_modules in assumed directories and force-kill/restart processes. These are security-relevant risks and should be reviewed in the context of package provenance and registry integrity controls.