Cline Supply Chain Attack: Cline 2.3.0 Silently Installs OpenClaw (opens in new tab)

(stepsecurity.io)

12 pointsvarunsharma071mo ago1 comments

1 comments

cline@2.3.0 was published with a malicious post-install script that silently installs OpenClaw on any machine running npm install.

j / k navigate · click thread line to collapse

(stepsecurity.io)

12 pointsvarunsharma071mo ago1 comments

cline@2.3.0 was published with a malicious post-install script that silently installs OpenClaw on any machine running npm install.

j / k navigate · click thread line to collapse