Postmortem: unauthorized Cline CLI npm publish on February 17, 2026~ai.agents~ai.prompt injection~dev~security.attacksgithubopenclawgithub actionspostmortemsA "benign payload" but installing openclaw doesn't seem benign to me... morecline.bot Mar 5, 2026