npm/cline: low

Unauthorized npm publish of cline@2.3.0 with modified postinstall script

Action: Upgrade cline to 2.4.0 or later.

npm i cline@2.4.0

Affected

Fixed versions

Sources

• osv: GHSA-9ppg-jx86-fqw7
• https://github.com/cline/cline/security/advisories/GHSA-9ppg-jx86-fqw7
• https://github.com/advisories/GHSA-9ppg-jx86-fqw7
• https://github.com/cline/cline
• https://github.com/ossf/malicious-packages/blob/4012598c9b06e58935bd8883f7a0cd37c3130664/osv/malicious/npm/cline/MAL-2026-1380.json

published 2026-02-19T15:17:10Z · modified 2026-09-09T05:30:03.599152973Z · JSON