Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Cline CLI compromised token mitigation

Advisory/Mitigation
First reported
Last updated
Happening score
H score 15
1 unique sources, 1 articles

Summary

Hide ▲

Cline maintainers released version 2.4.0 to contain the unauthorized npm publication of [email protected], which had been pushed with a compromised publish token. They also deprecated 2.3.0 and revoked the token to reduce the risk of further misuse. Affected users were told to update and verify that OpenClaw was not installed unexpectedly.

Related Happenings

OpenClaw 2026.6.6 security update for three flaws

Security Patch Release
H score31 First: 10.07.2026 17:19 Last: 10.07.2026 17:19 Sources 1

About this happening: OpenClaw maintainers shipped version 2026.6.6 to fix three security flaws that could enable credential theft, privilege escalation, and arbitrary code execution*...

Open Happening

GitHub npm version 12 hardens installs and token management

Security Tool/Service
H score11 First: 09.07.2026 19:49 Last: 09.07.2026 19:49 Sources 1

About this happening: GitHub released npm version 12, making install-time scripts opt-in by default and tightening package publishing controls to reduce supply-chain risk. The update al...

Open Happening

OpenClaw message-object prompt injection patched in 2026.4.23 security flaw

Vulnerability
H score15 First: 11.06.2026 20:46 Last: 11.06.2026 20:46 Sources 1

About this happening: OpenClaw has a patched message-object prompt injection flaw that let hidden instructions inside shared contacts, vCards, and location pins reach the LLM as trusted pro...

Open Happening

OpenClaw/OpenShell managed sandbox backend Claw Chain (multiple vulnerabilities)

Vulnerability
H score31 First: 15.05.2026 16:35 Last: 15.05.2026 16:35 Sources 1

About this happening: Researchers disclosed four OpenClaw flaws in the OpenShell managed sandbox backend that can be chained for data theft, privilege escalation, and persistence. T...

Open Happening

OpenClaw 2026.4.22 security patch release for Claw Chain flaws

Security Patch Release
H score24 First: 15.05.2026 16:35 Last: 15.05.2026 16:35 Sources 1

About this happening: OpenClaw released version 2026.4.22 to fix four CVE-backed vulnerabilities in OpenShell's managed sandbox backend that could be chained for data theft, privilege...

Open Happening

Timeline

  1. 20.02.2026 16:20 2 articles · 4mo ago

    Cline CLI compromised token mitigation

    Initial Disclosure

    After the npm compromise, maintainers responded by shipping 2.4.0, deprecating 2.3.0, and revoking the compromised publish token. That response was aimed at limiting further exposure from the unauthorized package release and guiding affected users to clean up their environments.

    Show sources
    Open in new tab