On February 17th, a compromised npm token was used to publish an unauthorized version of the Cline CLI. No malicious code was delivered, and the Cline VS Code and JetBrains extensions were never affected. Here's the full breakdown of what happened, what we found, and what we've changed.
Every few years, something shifts in how we write code and our workflows quietly adapt. Version control changed how we think about saving work. Code review changed how we think about readability. CI/CD changed how we think about testing. Now AI coding agents are changing something we barely think about at all: commit messages. Your commit history has a new audience. And that audience is reading more carefully than most of your teammates ever did. Here's what that looks like day to day. You ask
