Plugin4Shell: The Zero-Click Flaw That Broke Every Prominent AI Coding Agent at Once

The security promise was simple. A plugin marketplace reviews a piece of code, locks it to a specific, verified version, and every AI coding agent that installs it gets exactly what was reviewed. No surprises or swaps. That promise just got broken, simultaneously, across every major AI coding agent on the market. On September 17, cybersecurity... Weiterlesen