The Cline CLI npm package was compromised on February 17 via a stolen token, causing approximately 4,000 developers to unknowingly install OpenClaw during an 8-hour window. The attack exploited a proof-of-concept prompt injection vulnerability published by security researcher Adnan Khan, which a separate threat actor weaponized
Sort: