AI coding assistant Cline compromised to create more OpenClaw chaos
· Source: theregister.com
In short
The open source AI coding assistant Cline CLI was compromised in a supply chain attack that secretly installed OpenClaw on developers' machines. An unauthorized party used a compromised token to publish a malicious update to the npm registry, affecting users who installed cline@2.3.0 during an 8-hour window on February 17. The incident resulted in approximately 4,000 downloads of the compromised package before it was deprecated.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 8, 2026: Agentic AI and Automation Drive 20%+ Gains in Supply Chain Execution
Tags: supply-chain, security, cybercrime, automation, vulnerability, npm