leyrer @leyrer@23.social
Public

an unauthorized party used a compromised npm publish token to publish cline@2.3.0 to npm. The published package contained a single modification: an added postinstall script that globally installs openclaw… The CLI binary and all other package contents were byte-identical to the previous release.

cline.bot/blog/post-mortem-una

Post-mortem: Unauthorized Cline CLI npm publish on February 17, 2026 - Cline Blog

On February 17th, a compromised npm token was used to publish an unauthorized version of the Cline CLI. No malicious code was delivered, and the Cline VS Code and JetBrains extensions were never affected. Here's the full breakdown of what happened, what we found, and what we've changed.

cline.bot · Cline

0
0
0

If you have a fediverse account, you can quote this note from your own instance. Search https://23.social/users/leyrer/statuses/116199589950377867 on your instance and quote it. (Note that quoting is not supported in Mastodon.)