← All topics
npm-security
Latest stories covering npm-security, with summaries and links to related coverage.
1 stories · 1 reports · page 1 of 1
Connected topics
A GitHub Issue Title Compromised 4k Developer Machines
news
6 min read
On February 17, 2026, a malicious version of the Cline package was published to npm, which included a code change in the package.json file that executed a post-install command to install OpenClaw, an AI agent with full system access. This led to approximately 4,000 developer machines being compromised as users installed or updated the Cline package without consent.