Incident #1680
Unknown Actor Reportedly Exploited Cline's Claude-Powered GitHub Issue-Triage Workflow and Published an Unauthorized Cline CLI Package
Description
An unknown actor reportedly exploited prompt injection in Cline's Claude-powered GitHub issue-triage workflow and a GitHub Actions cache-poisoning path to obtain publication credentials. On February 17, 2026, a still-valid npm token was used to publish unauthorized cline@2.3.0, which installed OpenClaw without user intent. Cline said OpenClaw was non-malicious; it deprecated the release and revoked the token that day, while reporting that it found no evidence of user-data exposure.
Actors
Alleged Deployers
- cline-bot-inc.
- ai-agent-system-deployers
- threat-actors
Alleged Developers
- anthropic
- ai-agent-system-developers
Harmed Parties
- cline-bot-inc.
- cline-cli-users
- software-developers