vscode
Maliciouscline-ai-main.cline-ai-agent@3.1.3
Vulnerability report · Last retrieved from osv.dev October 8, 2026 at 12:44 PM UTC
OSV ID
MAL-2025-191157
Ecosystem
vscode
Summary
This extension is malicious. When installed it runs an info stealer that exfiltrates user data including credentials and cryptocurrency wallets. The extension also provides remote access and attempts to propagate itself.
Source: google-open-source-security (04aeefbf39e1e9157280b91899a141e4f4c6619d434c594e4a2d3bf43883dbe6)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.