2026-02-09 · 2026-Q1
Clinejection Supply Chain Attack
PrimaryL2InstructionSecondaryL7Build / ApprovalL4Code / Package
- Fixable:
- Yes, vendor patch
- Vendor response:
- Patched
- In the wild:
- Yes
- Actor:
- Attacker
Target
Cline AI coding assistant (5M+ users)
Impact
~4,000 developer machines compromised in 8-hour window; malicious cline@2.3.0 published to npm installing OpenClaw globally
Root Cause
Prompt injection in GitHub issue title tricked Claude-powered triage bot; GitHub Actions cache poisoning (Cacheract)