🤖 How "Clinejection" Turned an AI Bot into a Supply Chain Attack

A prompt injection in a GitHub issue title gave attackers code execution inside Cline's CI/CD pipeline, leading to cache poisoning, stolen npm credentials, and an unauthorized package publish affecting the popular AI coding tool's 5 million users. Here's the full technical breakdown and what developers should do now.

https://snyk.io/blog/cline-supply-chain-attack-prompt-injection-github-actions/

(Use VPN to open from Russia)

#AI