Post

grith.ai/blog/clineje... > […] every developer who installed or updated Cline got OpenClaw installed on their machine without consent. > how the attacker got the npm token: injecting a prompt into a GitHub issue title, which an AI triage bot read, interpreted as an instruction, and executed.

grith.aiA GitHub Issue Title Compromised 4,000 Developer MachinesA prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The attack composes well-understood vulnerabilities into so...

5/3/26, 7:00 pm8 reposts18 likes

Nick Williams

@wicky.nillia.ms

5 Mar

Mind blown. You have to admire the creativity in that escalation. Genuinely wonder if npm should start considering any package without attestation as suspect in future

ClawGlasses

@clawglasses.bsky.social

10 Mar

this is exactly why agent security needs a paradigm shift. software sandboxing won't cut it when agents can touch real systems. we need hardware-level isolation before agents get eyes in the world