🧰 Cline

The items that name it 14

• Prasenjit Sarkar (@stretchcloud) on X
  threadas affected products2026-10-27It is written here as Cline: malicious release distributed to roughly 4,000 machines in February via a poisoned GitHub Actions cache.
• Supply Chain Attack targeting Cline installs OpenClaw | Endor Labs
  writeupas classification.technologies2026-10-12
• StepSecurity Now Inventories AI Agent Skills in Your GitHub Repositories and on Developer Machines
  articleas affected products2026-10-08

  Version 2.3.0 of this AI coding tool was compromised and became a delivery vehicle for attack.

• graygnatconsole/mcp-audit-tool
  repoas affected products2026-09-26
• ToolLeak: Tool-Invocation Attacks on Coding Agents
  paperas affected products2026-09-21

  tested for prompt leakage and tool-invocation hijacking

• AI Agent Hacking Writeups
  repoas affected products2026-09-17
• GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
  articleas affected products2026-09-16

  suspected cache poisoning attack via prompt injection in a GitHub issue

• SolarWinds took a nation-state. The next attack just needs an LLM and $5. | Blog | Endor Labs
  articleas classification.technologies2026-09-11
• Nomos
  repoas affected products2026-08-02

  Coding agent whose issue tracker is cited among sources of the recursive-deletion failure reports

• AI Security Briefing
  articleas affected products2026-07-18

  vulnerable to GuardFall bypass

• AI Security Briefing
  writeupas classification.technologies2026-07-18
• HOL Guard
  repoas affected products2026-07-15
• Pantheon-Security/medusa
  repoas affected products2026-05-10It is written here as Cline (.clinerules/*.md).

  .clinerules/*.md

• AI Repository Security Baseline
  repoas affected products2026-05-08

  AI coding agent covered by the baseline (.clinerules)