Malware

2 articles · Page 1 of 1

• Mar 6, 2026

  Clinejection AI Supply Chain Attack: What Actually Happened

  How a prompt in a GitHub issue title hijacked the Cline AI bot, poisoned its release pipeline, and pushed a trojanized npm package to 4,000 developers

  AI ToolsClineDevOpsMalwareOpenClawSecurity
• Feb 25, 2026

  ClawHub Skills: How to Install Without Getting Compromised

  Koi Security reported 341 malicious ClawHub skills in February 2026. Here's exactly how to review any skill before you install it.

  AutomationClaWHavocClawHubMalwareOpenClawOpenClaw SkillsSecurity