Plugin4Shell Lets a Plugin Owner Swap Approved Code in Four AI Coding Agents
AIR Security disclosed Plugin4Shell on September 17, a flaw that defeats SHA pinning in Claude Code, Codex, GitHub Copilot, and Gemini CLI. Claude Code and Codex are patched. Copilot has no fix yet, and Google says Gemini CLI is deprecated and will not get one.