Cline CLI 2.3.0 was published with a stolen npm token, installing OpenClaw in an 8-hour attack affecting ~4,000 downloads.

Abstract: In this paper, a real-time, hybrid detection and mitigation framework for false data injection attacks in DC microgrids is presented. It is then evaluated on six distributed generation units ...

The malicious version of Cline's npm package — 2.3.0 — was downloaded more than 4,000 times before it was removed.

Abstract: The systems within the Industrial Internet of Things (IIoT) have complex structures and non-Euclidean data, which are challenging to manage. Due to the advantages of graph neural networks ...