AI coding assistant Cline compromised to create more OpenClaw chaos
"Users who installed Cline CLI cline@2.3.0 during the approximately 8-hour window between 3:26 AM PT and 11:30 AM PT on February 17 will have openclaw globally installed," Cline's maintainers said in a security advisory. "The openclaw package is a legitimate open source project and is not malicious, but its installation was not authorized or intended."
https://www.theregister.com/2026/02/20/openclaw_snuck_into_cline_package/