Record · corpus.blog/posts/01a08720-17b5-72a9-8c95-fd73e2f2def0

Clinejection — Compromising Cline's Production Releases just by Prompting an Issue Triager

adnanthekhan.com · published 9 February 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at adnanthekhan.com Wayback capture

9blogs citing

First cited: 18 Feb 2026
Most recent: 8 Sept 2026
Rank this month: not ranked
Links from this post: 13
Words captured: 3,773

Cited by

Blog

In the post

Date

Socket Engineering

Cline CLI npm Package Compromised via Suspected Cache Poisoning Attack Read at the source ↗

8 Sept 2026

neciudan.dev

GitHub Actions Cache Poisoning is eating open source Read at the source ↗

17 May 2026

Datadog Engineering

When an AI agent came knocking: Catching malicious contributions in Datadog’s open source repos Read at the source ↗

9 Mar 2026

eddmann.com

Weeknotes: Harness Engineering, PWAKit Documentation, and Marathon Reality Checks Read at the source ↗

6 Mar 2026

christian-schneider.net

AI agents as attack pivots: the new lateral movement Read at the source ↗

4 Mar 2026

neciudan.dev

How to steal npm publish tokens by opening GitHub issues Read at the source ↗

4 Mar 2026

sysid blog

Your Agent Has Root Read at the source ↗

22 Feb 2026

Snyk

How “Clinejection” Turned an AI Bot into a Supply Chain Attack Read at the source ↗

19 Feb 2026

mbgsec.com

Agent Compromised by Agent To Deploy an Agent Read at the source ↗

19 Feb 2026

mbgsec.com

Raptor Finds Root Cause of Cline’s Supply-Chain Compromise Read at the source ↗

18 Feb 2026

scott.willeke.com

2026 Won't Be the Year of AI Slop. It'll Be the Year We Wake Up to AI Security. Read at the source ↗

—

Links from this post

Link

Host

https://github.com/cline/cline/blob/7bdbf0a9a745f6abc09483fe9b08874c80fb44f3/.github/workflows/claude-issue-triage.yml

github.com

https://github.com/cline/cline/blob/main/.github/workflows/publish-nightly.yml

github.com

https://github.com/cline/cline/blob/main/.github/workflows/npm-nightly.yaml

github.com

https://github.com/anthropics/claude-code-action

github.com

Cacheract: The Monster in your Build Cache Read at the source ↗

adnanthekhan.com

https://github.blog/changelog/2025-11-20-github-actions-cache-size-can-now-exceed-10-gb-per-repository/

github.blog

https://github.com/cline/cline

github.com

https://github.com/adnanekhan/cacheract

github.com

https://cline.bot/blog/5m-installs-1m-open-source-grant-program

cline.bot

https://www.npmjs.com/package/cline

npmjs.com

https://github.com/cline/cline/commit/bb1d0681396b41e9b779f9b7db4a27d43570af0c

github.com

https://trust.cline.bot/

trust.cline.bot

https://github.com/cline/cline/pull/9211

github.com