GitHub phishing scam uses OpenClaw branding to lure developers into wallet drain: report