Record · corpus.blog/posts/01a07df5-49ee-7218-91aa-008e40b8ca35

How “Clinejection” Turned an AI Bot into a Supply Chain Attack

Snyk · published 19 February 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at snyk.io Wayback capture

2blogs citing

First cited: 15 Jun 2026
Most recent: 25 Aug 2026
Rank this month: not ranked
Links from this post: 24
Words captured: 2,347

Cited by

Blog

In the post

Date

clouatre.ca

AI-Augmented CI/CD: Shift Left Security With Bounded Risk Read at the source ↗

25 Aug 2026

Fedora Magazine

Sandbox AI coding agents with microVMs on Fedora Linux Read at the source ↗

15 Jun 2026

Links from this post

Link

Host

Clinejection — Compromising Cline's Production Releases just by Prompting an Issue Triager Read at the source ↗

adnanthekhan.com

https://github.com/cline/cline

github.com

https://github.com/cline/cline/security/advisories/GHSA-9ppg-jx86-fqw7

github.com

https://snyk.io/articles/clawdbot-ai-assistant/

snyk.io

Snyk and Cline: Securing the Future of Autonomous Coding Read at the source ↗

snyk.io

https://github.com/anthropics/claude-code-action

github.com

https://snyk.io/articles/understanding-prompt-injection-techniques-challenges-and-risks/

snyk.io

https://labs.snyk.io/resources/toxic-flow-analysis/

labs.snyk.io

https://snyk.io/articles/toxic-flow-analysis-framework-identification/

snyk.io

https://snyk.io/blog/exploring-vulnerabilities-github-actions/

snyk.io

https://docs.github.com/en/actions/using-workflows/caching-dependencies-to-speed-up-workflows

docs.github.com

https://github.com/adnanthekhan/cacheract

github.com

https://github.com/cline/cline/pull/9211

github.com

https://www.linkedin.com/posts/yuval-zacharia_a-github-issue-title-just-compromised-5-million-activity-7429995520007331840-qmbK

linkedin.com

Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise Read at the source ↗

snyk.io

Ultralytics AI Pwn Request Supply Chain Attack Read at the source ↗

snyk.io

Weaponizing AI Coding Agents for Malware in the Nx Malicious Package Security Incident Read at the source ↗

snyk.io

The New Threat Landscape: AI-Native Apps and Agentic Workflows Read at the source ↗

snyk.io

https://github.com/snyk/agent-scan

github.com

https://docs.snyk.io/developer-tools/snyk-cli/commands/aibom

docs.snyk.io

https://snyk.io/product/open-source-security-management/

snyk.io

https://labs.snyk.io/resources/prompt-injection-mcp/

labs.snyk.io

https://labs.snyk.io/resources/agent-hijacking/

labs.snyk.io

https://snyk.io/lp/ai-security-crisis-python/

snyk.io