Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
Security firm Air Security disclosed on Thursday that a flaw it named Plugin4Shell lets an attacker who controls a plugin's code repository swap the plugin an AI coding agent installs for malicious code, even when the ma…