Skip to content
OpenAdvisories

Package · npm

cline

3 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-9ppg-jx86-fqw7

    Unauthorized npm publish of cline@2.3.0 with modified postinstall script

    ### Description On February 17, 2026 at 3:26 AM PT, an unauthorized party used a compromised npm publish token to publish an update to Cline CLI on the NPM registry: cline@2.3.0. The published package contains a modified package.json with an added postinstall…

    cline npm