registry / cline / 3.0.47

cline@3.0.47

Autonomous coding agent CLI - capable of creating/editing files, running commands, using the browser, and more

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No confirmed malicious attack surface. Install-time activity is limited to caching the package's own platform binary; runtime certificate handling is invoked only by the cline command.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install runs postinstall; a user later runs cline.

Impact

Writes bin/.cline during installation and may write Cline-managed CA files at command runtime; no network or exfiltration behavior is present in inspected source.

Mechanism

local platform-binary cache and runtime CA-bundle configuration

AI rationale

The lifecycle hook performs a package-aligned local binary cache operation, and the inspected wrapper code has no concrete malicious chain. The static lifecycle signal is therefore a false positive.

Evidence

package.jsonpostinstall.mjsbin/clinebin/ca-certs.cjsbin/.clinenode_modules/@cline/cli-<platform>-<arch>/bin/cline~/.cline/cli-node-extra-ca-certs.pem

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

cline@3.0.47

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code