TechFeb 20, 20264 minClinejection: How Cline’s AI bot was abused in a supply‑chain attackThis article explains how Cline’s issue‑triage bot was exploited via a three‑step chain—prompt injection, cache poisoning, and credential commingling—leading to an unauthorized package release that potentially affected about five million users.SecurityAISupply ChainClineGitHub Actions