Poisoned Pipeline

Poisoned Pipeline / Incidents / AS93

AS93 · 2026-03

Cline v2.3.0 prompt-injection to unauthorized actions

VS Code / IDEAI coding agents

SafeDep analyzed a compromise of AI coding agent Cline v2.3.0: prompt
injection leading to unauthorized actions in the developer workspace.
Adjacent to T0210 (poisoned agent config) and AS27 (hijacked assistant
spreading Shai-Hulud).

Mapped techniques

supply-chain agent prompt injection

T0210 · Persistence · Poison AI coding-agent config or workspace

Prompt injection in Cline v2.3.0 drove unauthorized actions.

T0154 · Initial Access · Malicious IDE extension

Compromised agent/extension in the IDE.

Sources