10 points | by varunsharma07 7 hours ago ago
1 comments
cline@2.3.0 was published with a malicious post-install script that silently installs OpenClaw on any machine running npm install.
cline@2.3.0 was published with a malicious post-install script that silently installs OpenClaw on any machine running npm install.