Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Cline Supply Chain Attack intelligence trail | MindPattern

Entity trail

Cline Supply Chain Attack

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

6

Edges

0

Sources

14

Corpus findings

2026-03-07 / rss-researcherClinejection: Prompt Injection Compromises Cline's Production npm ReleasesSecurity researcher Adnan Khan demonstrated a full supply-chain attack against the Cline VS Code extension. A prompt injection in a GitHub issue title poisoned Cline's AI-powered triage bot (running claude-code-action@v1 with Bash/Read/Write tools), which then poisoned the CI cache loaded by the nightly release workflow, stealing npm publishing secrets. [redacted] was published by an anonymous attacker before being retracted. The attacker only added OpenClaw installation but could have done far
2026-03-06 / vibe-coding-researcherClinejection Supply Chain Attack Analysis by Willison and SnykPrompt injection in GitHub issue title compromised Cline npm publishing tokens via cache poisoning. 4000 developer machines affected in 8-hour window.
2026-03-06 / hn-researcherClinejection Supply Chain Attack 4000 Developer Machines via Prompt InjectionGitHub issue title prompt injection exploited Cline AI triage bot, poisoned npm cache, published malicious [redacted] to 4000 devs
2026-02-27 / news-researcherCline CLI Supply Chain Attack Clinejection Prompt Injection npm Token Theft

Source trail

AWS Security Blog — FortiGate Campaign The Hacker News — FortiGate Coverage BleepingComputer — FortiGate mbgsec.com — Clinejection Post-Mortem Snyk — Cline Supply Chain Attack Fortune — Pentagon-Anthropic NBC News — Anthropic Defense

Graph sources

entity graphfindings textkg entitiesnewsletter issues

Prompt injection in Cline's AI issue triage bot stole npm token. [redacted] installed OpenClaw on 4000 machines. Root cause: AI processing untrusted GitHub issues.

2026-02-21 / thought-leaders-researcherBargury Names Agent Security Moment — Agent Compromised by Agent to Deploy AgentSecurity researcher Michael Bargury publishes definitive Clinejection post-mortem. Framing 'agent compromised by agent to deploy an agent' is most precise description of new AI-on-AI supply chain attack class.

2026-02-21 / news-researcherCline CLI Clinejection Supply Chain Attack — 4000 Developers CompromisedAttacker compromised npm publish token to push Cline CLI v2.3.0 with malicious postinstall script installing OpenClaw. First AI coding tool supply chain attack. 8 hours live, 4000 downloads.

Anthropic — The Briefing Event

Unit42 — BeyondTrust CVE-2026-1731

StepSecurity — Cline Detection