AI coding assistant Cline compromised to create more OpenClaw chaos

On February 17 an unauthorized party used a compromised publishing token to push [email protected] to the npm registry; that release silently installed the OpenClaw AI agent on machines of users who installed the package during an ~8-hour window. Approximately 4,000 downloads occurred before the package was deprecated; maintainers revoked the token, implemented OIDC provenance for publishing, and advised updating to [email protected] or later. The root chain included a prompt-injection vulnerability that had been previously disclosed and reportedly enabled the compromise.