Technology ❯ Software Engineering ❯ Open Source Software ❯ Package Management

npm

Cline CLI npm Token Compromise Pushed Tainted Release That Installed OpenClaw

The breach spotlights AI-driven issue triage and GitHub Actions cache poisoning as a viable route to publication credential theft.

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens