Trojanized AI Tool Erases 150 GitHub Repositories in Hours

A developer unknowingly installed a malicious AI productivity tool called OpenClaw, granting attackers complete access to delete over 150 GitHub repositories spanning personal projects and client work. This incident reveals a critical vulnerability in developer supply chains—unvetted tools exploit user trust to bypass security defenses and steal authentication tokens. The story underscores the urgent need for developers to vet third-party tools, practice strict token management, and implement multi-factor authentication to mitigate such attacks.