> github:cline/cline#aaaaaaaa could point to a commit in a fork with a replaced package.json containing a malicious preinstall script.
[0] https://adnanthekhan.com/posts/clinejection/#the-prompt-inje...