Tag

github-actions-cache-poisoning

Safeguard articles tagged "github-actions-cache-poisoning" — guides, analysis, and best practices for software supply chain and application security.

1 article

Software Supply Chain Security

Clinejection: prompt injection turns AI coding bot into supply chain attack

A prompt-injected GitHub issue title hijacked Cline's AI triage bot, poisoned its build cache, and pushed a malicious npm release to 4,000 developers.

Jun 30, 20267 min read