Model and package supply chain

A supply chain attack dubbed 'Sandworm_Mode' has hit NPM. The malicious code spreads like a worm, poisons AI assistants, exfiltrates secrets, and includes a destructive dead switch.

A campaign targets crypto wallets and steals money. The source says its methodology has far wider potential and could be used by other attackers.

On February 17, 2026, an unauthorized party used a compromised npm publish token to publish cline@2.3.0 of the Cline CLI, which added a postinstall script that runs npm install -g openclaw@latest. Anyone who installed that version during the roughly eight-hour window from 3:26 a.m. to 11:30 a.m. PT got OpenClaw installed on their machine. Cline says no other changes or malicious behavior were observed.

A researcher backdoored a Python pickle file from a two-year-old Husky AI Google Colab notebook using fickling's --inject command. When the file was loaded by StyleGAN2-ADA's generate command, the injected code executed without affecting the program's output. The author notes that Google Drive mapped into Colab projects could expose that data to an attacker who tricks a user into opening a malicious pickle file.