Socket on Mythryl: “A compromised npm token was used to push an unauthorized postinstall…”

A compromised npm token was used to push an unauthorized postinstall script in cline@2.3.0, a popular AI coding agent CLI with 90k weekly downloads. Big shoutout to @adnanthekhan.bsky.social whose research sniffed out the cache poisoning vulnerability! 💪 Details → socket.dev/blog/cline-c...

socket.devCline CLI npm Package Compromised via Suspected Cache Poison...A compromised npm publish token was used to push a malicious postinstall script in cline@2.3.0, affecting the popular AI coding agent CLI with 90k wee...

18/2/26, 5:06 pm3 reposts4 likes

Post