Plugin4Shell Exploit Exposes AI Coding Agents to Supply Chain Attacks
A critical vulnerability designated Plugin4Shell has been discovered affecting four major AI coding platforms, allowing repository controllers to swap pinned plugins for malicious versions despite version locks. Security firm Air Security identified the flaw, prompting patches from Anthropic and OpenAI while leaving GitHub Copilot users potentially exposed.
By Gourav Rajput









_Pattara_Alamy.jpg?width=720&quality=80&disable=upscale)







