Clinejection: When Your AI Coding Tool Became the Weapon

This article was originally published on LucidShark Blog. On February 17, 2026, a developer opened a GitHub issue on the Cline repository. The issue title looked routine. It was not. Embedded in that title was a prompt injection payload targeting Cline's own AI-powered issue triage bot. Eight days later, an attacker exploited the same vulnerability to publish an unauthorized version of Cline to npm. For eight hours, every developer who ran npm update received a rogue AI agent called OpenClaw...