Cline Bot Inc.

Incidents Harmed By

Incident 16805 Report
Unknown Actor Reportedly Exploited Cline's Claude-Powered GitHub Issue-Triage Workflow and Published an Unauthorized Cline CLI Package

2026-02-17

An unknown actor reportedly exploited prompt injection in Cline's Claude-powered GitHub issue-triage workflow and a GitHub Actions cache-poisoning path to obtain publication credentials. On February 17, 2026, a still-valid npm token was used to publish unauthorized cline@2.3.0, which installed OpenClaw without user intent. Cline said OpenClaw was non-malicious; it deprecated the release and revoked the token that day, while reporting that it found no evidence of user-data exposure.

Incidents involved as Deployer

Incident 16805 Report
Unknown Actor Reportedly Exploited Cline's Claude-Powered GitHub Issue-Triage Workflow and Published an Unauthorized Cline CLI Package

2026-02-17

An unknown actor reportedly exploited prompt injection in Cline's Claude-powered GitHub issue-triage workflow and a GitHub Actions cache-poisoning path to obtain publication credentials. On February 17, 2026, a still-valid npm token was used to publish unauthorized cline@2.3.0, which installed OpenClaw without user intent. Cline said OpenClaw was non-malicious; it deprecated the release and revoked the token that day, while reporting that it found no evidence of user-data exposure.

Related Entities

AI agent system deployers

Incidents involved as Deployer

Threat actors

Incidents involved as Deployer

Anthropic

Incidents involved as Developer

AI agent system developers

Incidents involved as Developer

Cline CLI users

Incidents Harmed By

Software developers

Incidents Harmed By

Claude Code

Incidents implicated systems

AI agent systems

Incidents implicated systems

GitHub Actions

Incidents implicated systems

Cline CLI

Incidents implicated systems

npm registry

Incidents implicated systems

Claude Code Action

Incidents implicated systems

Claude

Incidents implicated systems