Clinejection: How a GitHub Issue Title Compromised an AI Coding Assistant Used by 5M Developers
In December 2025, Cline, an AI coding assistant with over 5 million users, suffered a four-hop supply chain compromise after a misconfigured GitHub issue triage workflow allowed any user to inject mal…