#ci-cd
2 articles
Your GitHub Issue Just Stole Your CI Secrets — The Prompt Injection Attack Nobody Saw Coming
CVE-2026-54316, CVE-2026-12537, and the 'Comment and Control' pattern: How a malicious GitHub issue title or PR comment hijacks Cl…
Beware: Clinejection — How a GitHub Issue Title Became a Supply Chain Attack on Millions of Developers
A prompt injection in a GitHub issue title compromised Cline's CI/CD pipeline, poisoned the Actions cache, stole npm publication t…