Johnstawinski (auto-discovered)

A security researcher disclosed a time-of-check-to-time-of-use (TOCTOU) vulnerability in OpenAI's Codex cloud code review that could enable prompt injection attacks. The flaw, which affects the AI-pow…

Security researcher found that several Claude Code community plugins listed in Anthropic's official marketplace were vulnerable to repo-jacking, where abandoned GitHub repository names could be claime…