npm Package Hijack Installs OpenClaw on 90K Machines
💡Supply-chain attack via npm hit 90K devs, secretly installing OpenClaw—check your setup now.
⚡ 30-Second TL;DR
What Changed
Hijacked publish token for Cline CLI npm package
Why It Matters
Major supply-chain attack on dev tools risks widespread OpenClaw deployment without consent. Developers must audit CLI tools amid rising npm threats.
What To Do Next
Run `npm audit` and scan for unauthorized OpenClaw installs on your dev machines.
Key Points
- •Hijacked publish token for Cline CLI npm package
- •Silently installs OpenClaw on developer machines
- •Affected ~90,000 weekly users over 8 hours
🧠 Deep Insight
Background and context from public sources — not the original article. 10 sources cited.
🔑 Enhanced Key Takeaways
- •The malicious version cline@2.3.0 was downloaded approximately 4,000 times before deprecation, far below the package's typical 90,000 weekly downloads[2][8].
- •The attack exploited a prior prompt injection vulnerability in Cline disclosed by researcher Adnan Khan, whose PoC on a test repository was discovered and weaponized by the attacker[2][10].
- •OpenClaw integrates deeply with messaging apps like WhatsApp, Telegram, Slack, Discord, iMessage, and Teams, amplifying risks from its broad system access[1][3].
- •Cline maintainers responded by revoking the token, deprecating 2.3.0, releasing fixed versions 2.4.0+, and switching to OIDC provenance via GitHub Actions[2][4].
🔮 Future ImplicationsAI analysis grounded in cited sources
⏳ Timeline
📎 Sources (10)
Factual claims are grounded in the sources below. Forward-looking analysis is AI-generated interpretation.
- beauceronsecurity.com — Cline Openclaw Malware
- theregister.com — Openclaw Snuck Into Cline Package
- csoonline.com — Compromised Npm Package Silently Installs Openclaw on Developer Machines
- endorlabs.com — Supply Chain Attack Targeting Cline Installs Openclaw
- penligent.ai — Multiple Hacking Groups Exploit Openclaw Instances to Steal API Keys and Deploy Malware
- hackers-arise.com — Cve 2026 25253 How Malicious Links Can Steal Authentication Tokens and Compromise Openclaw AI Systems
- security.utoronto.ca — Openclaw Vulnerability Notification
- darkreading.com — Supply Chain Attack Openclaw Cline Users
- cybersecuritynews.com — AI Dev Tool Cline
- adnanthekhan.com — Clinejection
Weekly AI Recap
Read this week's curated digest of top AI events →
👉Related Updates
AI-curated news aggregator. All content rights belong to original publishers.
Original source: OpenClaw.report ↗
This is a summary, not the original. Read the source, or get the weekly briefing.
Weekly AI briefing
One email a week. Unsubscribe anytime.