# How "Clinejection" Turned an AI Bot into a Supply Chain Attack

DevFeed: [How "Clinejection" Turned an AI Bot into a Supply Chain Attack](<https://devfeed.tech/articles/how-clinejection-turned-an-ai-bot-into-a-supply-chain-attack-7864.md>)

Original publisher: [Read original article](<https://snyk.io/blog/cline-supply-chain-attack-prompt-injection-github-actions/>)

Author: Stephen Thoemmes

Published: 2026-02-19T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [AI-assisted coding](<https://devfeed.tech/topics/ai-assisted-coding.md>), [AI Bots](<https://devfeed.tech/topics/ai-bots.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [ci](<https://devfeed.tech/topics/ci.md>), [incident](<https://devfeed.tech/topics/incident.md>)

Tags: [agents](<https://devfeed.tech/tags/agents.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [ai-assisted-coding](<https://devfeed.tech/tags/ai-assisted-coding.md>), [anthropic](<https://devfeed.tech/tags/anthropic.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [bash](<https://devfeed.tech/tags/bash.md>), [blog](<https://devfeed.tech/tags/blog.md>), [cache](<https://devfeed.tech/tags/cache.md>), [ci](<https://devfeed.tech/tags/ci.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [claude](<https://devfeed.tech/tags/claude.md>), [cli](<https://devfeed.tech/tags/cli.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devrel](<https://devfeed.tech/tags/devrel.md>), [github](<https://devfeed.tech/tags/github.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [incident](<https://devfeed.tech/tags/incident.md>), [interest](<https://devfeed.tech/tags/interest.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [openclaw](<https://devfeed.tech/tags/openclaw.md>), [payload](<https://devfeed.tech/tags/payload.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [vulnerability-insights](<https://devfeed.tech/tags/vulnerability-insights.md>)

## AI overview

The article examines Clinejection, a vulnerability chain that used indirect prompt injection, GitHub Actions cache poisoning, and credential weaknesses to turn Cline's AI issue-triage bot into a supply-chain attack vector. An unauthorized Cline CLI version was published to npm and installed OpenClaw globally during an approximately eight-hour window.

## Source excerpt

The Clinejection vulnerability chain illustrates a dangerous new era of supply chain attacks where AI agents are turned into exploit vectors. By combining indirect prompt injection with GitHub Actions cache poisoning, attackers successfully pushed unauthorized code to thousands of developers. This incident highlights the critical need for hardened CI/CD pipelines and rigorous security for AI-assisted coding tools.