Simon Willison • 3/6/2026

Clinejection — Compromising Cline's Production Releases just by Prompting an Issue Triager

The article describes a sophisticated security attack called 'Clinejection' where a prompt injection in a GitHub issue title tricked an AI-powered triage bot into executing malicious commands. This led to cache poisoning, allowing the attacker to steal NPM publishing secrets and compromise the Cline project's production release pipeline, resulting in a malicious package version being published.

0 comments

#prompt injection #Github Actions #Security Vulnerability