Repo-Jacking Anthropic's Claude Community Plugins (and the SHAs That Saved Them)
Security researcher found that several Claude Code community plugins listed in Anthropic's official marketplace were vulnerable to repo-jacking, where abandoned GitHub repository names could be claimed by attackers. The …