AI Dev Tool Cline’s npm Token Hijacked by Hackers for 8 Hours

A compromised publish token gave attackers brief but concerning access to the Cline CLI npm package, exposing developers who installed it during an 8-hour window on February 17, 2026. The incident highlights the growing risk of supply chain attacks targeting developer tooling ecosystems. On February 17 at 3:26 AM PT, an unauthorized party leveraged a […]

The post AI Dev Tool Cline’s npm Token Hijacked by Hackers for 8 Hours appeared first on Cyber Security News.