https://cline.bot/blog/post-mortem-unauthorized-cline-cli-npm
Post-mortem: Unauthorized Cline CLI npm publish on February 17, 2026 - Cline Blog
On February 17th, a compromised npm token was used to publish an unauthorized version of the Cline CLI. No malicious code was delivered, and the Cline VS Code...
post mortemcline clinpm publishunauthorizedfebruary
https://neciudan.dev/cline-ci-got-compromised-here-is-how
How to steal npm publish tokens by opening GitHub issues — Neciu Dan
Mar 4, 2026 - A chain of vulnerabilities and pretty clever attack strategies led to the compromise of the Cline CLI. Let me explain what happened and what you can do to...
how tonpm publishgithub issuesneciu dansteal
https://deno.com/blog/dnt-oak
How to publish Deno modules to NPM | Deno
dnt and oak - making code work across Deno and Node.js
how to publishdenomodulesnpm