4 ms·
It was actually glthub/cline, as per the article, not github/cline.
by stavros 8mo ago
It was actually glthub/cline, as per the article, not github/cline.
- ssgodderidge 8mo agoThe original report by the developer, Khan, mentions that github:cline/cline would also work[0]. > github:cline/cline#aaaaaaaa could point to a commit in a fork with a replaced package.json containing a malicious preinstall script. [0] https://adnanthekhan.com/posts/clinejection/#the-prompt-injection https://adnanthekhan.com/posts/clinejection/#the-prompt-inje...