Home

By injecting a prompt into a GitHub issue title, which an AI triage bot read, an attacker was able to install OpenClaw onto 4000 developer’s computers. But it could have been used to install any npm package - the sky is the limit.

Hmm, the fear that everyone was concerned about when Microslop injected Coslop into it’s latest acquisition is coming to pass. Glad I didn’t start my first project on a compromised GitHub.