Cline CLI npm Breach: What Happened and What to Do
Cline CLI npm token was compromised and used to publish v2.3.0 with an unauthorized postinstall script. The payload was benign, but the incident exposes a critical CI/CD vulnerability involving AI agents with shell access.