Imagine waking up to find that your favorite AI coding assistant has been updated with malware. This isn't a hypothetical movie plot. It almost became a reality for the 5 million users of Cline, a popular AI-powered tool for developers.
A vulnerability in Cline's AI triage workflow showed how an attacker could compromise an entire production release pipeline without writing a single line of code โ just by opening a GitHub issue.