Supply Chain Attack Secretly Installs OpenClaw for Cline Users

Back Darkreading

Supply Chain Attack Secretly Installs OpenClaw for Cline Users

Darkreading •Rob Wright • February 19, 2026

Share: View original

The malicious version of Cline's npm package — 2.3.0 — was downloaded more than 4,000 times before it was removed.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cline CLI npm Package Compromised, Installs OpenClaw on Developer Machines The Cline CLI npm package was compromised on February 17, 2026, allowing an unauthorized party to publish a malicious update (version 2.3.0) that secretly installs OpenClaw on users' machines. This incident affected developers who downloaded the package, with over 4,000 downloads before the malicious version was removed. The attack exploited a compromised publish token, granting access for approximately 8 hours. 8 sources 25

Extracted Entities

Attack Types (1)

Supply Chain Attack

Companies (1)

MITRE ATT&CK (1)

T1195 - Supply Chain Compromise

Platforms (1)

Tools (1)