The malicious version of Cline’s npm package, 2.3.0, was downloaded more than 4,000 times before it was removed.
First seen on darkreading.com
Jump to article: www.darkreading.com/application-security/supply-chain-attack-openclaw-cline-users
Supply Chain Attack Secretly Installs OpenClaw for Cline Users