It was my fault, I copied the command and ran it from a search result provided by my OpenClaw that was running on a non-frontier model (I can’t remember which - something small and free).
I’m pretty confident it’s gone, this happened about 6-7 weeks ago. Have been running recurring checks for processes, Malwarebytes, and a PiHole to monitor traffic.
