Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-02-26 · source-backed
Domain: agent-security | Difficulty: advanced | Source
Five-layer defense post-Clinejection: (1) Scope --allowedTools to read-only for triage agents, (2) Separate cache boundaries between low/high privilege workflows, (3) Distinct npm tokens for nightly vs production, (4) OIDC trusted publishing via GitHub Actions, (5) Never interpolate user-controlled data into AI agent prompts.
Each link below shares sources, entities, or timing with this story.
In April 2026, Johns Hopkins researchers planted malicious instructions in GitHub PR titles and got Claude Code, Gemini CLI, and GitHub Copilot to exfiltrate GitHub Actions secrets, then post the results back as PR comments. Read that again. The attack payload was a pull reque...
1. Harden CI/CD Pipelines Against PromptPwnd AI Injection | Intermediate Aikido Security disclosed "PromptPwnd" — five Fortune 500 companies confirmed affected by AI agent injection in GitHub Actions. 1. Audit all .github/workflows/ for user-controlled input (github.event.issu...
Domain: agent-security | Difficulty: intermediate | Source Post-Clinejection minimum standard. Configure on npmjs.com, add publishConfig: {provenance: true} to package.json, use npm publish --provenance with `permissions: id-[redacted] in GitHub Actions. Revoke all existing np...
Cline published their full post-mortem on the Clinejection supply chain attack. The root cause is worth understanding in detail: a prompt injection in Cline's GitHub Actions issue triage bot (Claude processing untrusted issue titles) allowed arbitrary code execution in CI. Thi...
Domain: Agent Security | Difficulty: Advanced Source: StepSecurity Claude Code in GitHub Actions makes unrestricted network calls by default. Lock it down: 1. Add step-security/harden-runner@v2 with egress-policy: audit to capture all outbound connections 2. Run on 3-5 represe...
Domain: AI Productivity | Difficulty: Advanced Source: Security Boulevard Self-correcting quality loop: Claude generates, scans, reads rules, fixes until gates pass: 1. Install SonarScanner CLI and configure sonar-project.properties 2. Add SonarQube MCP server to Claude Code 3...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.