GitHub phishers use fake OpenClaw tokens to drain crypto wallets | Hacker News Reader