{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreigolwh4oxsustmmhf2jp34iauvzvjtzu6i3dsxdexeuereq5ssjam",
    "uri": "at://did:plc:6wtxqaikjf62unmnajbfbq5v/app.bsky.feed.post/3mfdgttfp5vl2"
  },
  "coverImage": {
    "$type": "blob",
    "ref": {
      "$link": "bafkreiap5ruafam4j6iyhw4skxqxrlglzaxfce4ytm5f4bpe4txdzae43a"
    },
    "mimeType": "image/jpeg",
    "size": 30330
  },
  "path": "/cline-cli-npm-package-hijacked-for-8-hours/",
  "publishedAt": "2026-02-20T19:16:53.000Z",
  "site": "https://vpncentral.com",
  "tags": [
    "News",
    "Cline CLI npm Package Hijacked for 8 Hours",
    "VPN Central"
  ],
  "textContent": "Hackers compromised Cline CLI’s npm publish token on February 17, 2026, from 3:26 AM PT to 11:30 AM PT. They released malicious version 2.3.0 that installed OpenCLAW via postinstall script. Developers who installed during this window face potential supply chain risk. Cline serves as AI coding assistant for VS Code and JetBrains. Attackers modified only […]\n\nThe post Cline CLI npm Package Hijacked for 8 Hours appeared first on VPN Central.",
  "title": "Cline CLI npm Package Hijacked for 8 Hours"
}