Cline CLI Supply Chain Attack Post-Mortem

Cline published their full post-mortem on the Clinejection supply chain attack. The root cause is worth understanding in detail: a prompt injection in Cline's GitHub Actions issue triage bot (Claude processing untrusted issue titles) allowed arbitrary code execution in CI. This led to cache poisoning and npm/VSCE/OVSX token theft. During credential rotation, the wrong token was deleted while the exposed one stayed active. 4,000 developers downloaded compromised [redacted] in an 8-hour window that silently installed OpenClaw globally on every user's system.

Cline has since moved to OIDC-based publishing via GitHub Actions with cryptographic attestation. This is now the minimum standard for any package you publish.