security1 publisher
Plugin4Shell defeats the SHA pinning that locks reviewed plugins in four AI coding agents
AIR says Claude Code, Codex, GitHub Copilot and Gemini CLI all check out a pinned plugin commit without verifying they landed on it, so a trusted plugin can be swapped for attacker code during a background auto-update. Anthropic and OpenAI have patched.
Publishers:helpnetsecurity.com
Reality
- Evidence45
- Adoption52
- Hype gap+30
- Incentives80
- Confidence55