Actor Exploited Cline AI Workflow and Published Unauthorized CLI Package

# Actor Exploited Cline AI Workflow and Published Unauthorized CLI Package

https://gcdradar.vercel.app/incidents/actor-exploited-cline-ai-workflow-and-published-unauthorized · AIR-2026-0407 · closed 2026-03-03

- Lane: Patch now
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2026-02-17
- AI role: Attack on AI
- Products: Cline, Claude

## Summary

An unknown actor exploited prompt injection in an AI workflow to obtain credentials and publish an unauthorized npm package. The developer deprecated the release and revoked credentials without user data exposure.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-02-17: Unknown Actor Reportedly Exploited Cline's Claude-Powered GitHub Issue-Triage Workflow and Published an Unauthorized Cline CLI Package (https://incidentdatabase.ai/cite/1680)

## Sources

- 2026-02-17 AI Incident Database: Unknown Actor Reportedly Exploited Cline's Claude-Powered GitHub Issue-Triage Workflow and Published an Unauthorized Cline CLI Package https://incidentdatabase.ai/cite/1680

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.