組織

Cline Bot Inc.

影響を受けたインシデント

インシデント 16805 Report
Unknown Actor Reportedly Exploited Cline's Claude-Powered GitHub Issue-Triage Workflow and Published an Unauthorized Cline CLI Package

2026-02-17

An unknown actor reportedly exploited prompt injection in Cline's Claude-powered GitHub issue-triage workflow and a GitHub Actions cache-poisoning path to obtain publication credentials. On February 17, 2026, a still-valid npm token was used to publish unauthorized cline@2.3.0, which installed OpenClaw without user intent. Cline said OpenClaw was non-malicious; it deprecated the release and revoked the token that day, while reporting that it found no evidence of user-data exposure.

もっと

Incidents involved as Deployer

インシデント 16805 Report
Unknown Actor Reportedly Exploited Cline's Claude-Powered GitHub Issue-Triage Workflow and Published an Unauthorized Cline CLI Package

2026-02-17

An unknown actor reportedly exploited prompt injection in Cline's Claude-powered GitHub issue-triage workflow and a GitHub Actions cache-poisoning path to obtain publication credentials. On February 17, 2026, a still-valid npm token was used to publish unauthorized cline@2.3.0, which installed OpenClaw without user intent. Cline said OpenClaw was non-malicious; it deprecated the release and revoked the token that day, while reporting that it found no evidence of user-data exposure.

もっと

Entity

AI agent system deployers

もっと
Entity

Threat actors

もっと
Entity

Anthropic

もっと
Entity

AI agent system developers

もっと
Entity

Cline CLI users

もっと
Entity

Software developers

もっと
Entity

Claude Code

もっと
Entity

AI agent systems

もっと
Entity

GitHub Actions

もっと
Entity

Cline CLI

もっと
Entity

npm registry

もっと
Entity

Claude Code Action

もっと
Entity

Claude

もっと