Cline CLI 2.3.0 Supply Chain Attack Installed OpenClaw on Developer Systems
Published: (February 20, 2026 at 09:20 AM EST)
1 min read
Source: The Hacker News
Source: The Hacker News
Summary
In yet another software supply chain attack, the open-source, artificial intelligence (AI)-powered coding assistant Cline CLI was updated to stealthily install OpenClaw, a self‑hosted autonomous AI agent that has become exceedingly popular in the past few months.
Timeline
On February 17, 2026, at 3:26 AM PT, an unauthorized party used a compromised npm publish token to publish an update to Cline CLI.