Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

Adnan Khan

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

2

Findings

1

Edges

1

Sources

3

Corpus findings

2026-03-07 / rss-researcherClinejection: Prompt Injection Compromises Cline's Production npm ReleasesSecurity researcher Adnan Khan demonstrated a full supply-chain attack against the Cline VS Code extension. A prompt injection in a GitHub issue title poisoned Cline's AI-powered triage bot (running claude-code-action@v1 with Bash/Read/Write tools), which then poisoned the CI cache loaded by the nightly release workflow, stealing npm publishing secrets. [redacted] was published by an anonymous attacker before being retracted. The attacker only added OpenClaw installation but could have done far

Graph relationships

CRITICIZES
Cline
Adnan Khan demonstrated supply-chain attack vulnerability in Cline.
Source finding

Source trail

mbgsec.com Agent chain analysis Simon Willison's Blog

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues