#6
The Hacker News
general
February 20, 2026 at 14:20 UTC
Cline CLI 2.3.0 Supply Chain Attack Installed OpenClaw on Developer Systems
By [email protected] (The Hacker News)
AI Summary
The Cline CLI AI coding assistant suffered a supply chain attack when version 2.3.0 was published on February 17, 2026 using a compromised npm token, secretly installing the OpenClaw autonomous AI agent. The malicious package was downloaded over 4,000 times before removal, highlighting supply chain risks in AI development tools.
Relevance score: 85.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →