AIDEFEND SecureFlow / SecureFlow Case Index

Clinejection: Issue Triage Agent to Release-Token Exposure

• Autonomous Agents
• System Compromise & RCE
• Credential & Identity Theft

A public issue title could make Cline's Claude triage workflow run shell commands; the researcher reproduced this first step in a mirror. Its shared Actions cache created a route to nightly-release secrets. Separately, Cline confirmed that a still-active npm token was used by a third party to publish cline@2.3.0 with an OpenClaw postinstall script, but the exact token-theft sequence was not forensically established.