Home / Feb 20, 2026 / Story
0
#6 The Hacker News general February 20, 2026 at 14:20 UTC

Cline CLI 2.3.0 Supply Chain Attack Installed OpenClaw on Developer Systems

By [email protected] (The Hacker News)

AI Summary

The Cline CLI AI coding assistant suffered a supply chain attack when version 2.3.0 was published on February 17, 2026 using a compromised npm token, secretly installing the OpenClaw autonomous AI agent. The malicious package was downloaded over 4,000 times before removal, highlighting supply chain risks in AI development tools.

Relevance score: 85.0/100

# More from February 20