
Zero-click flaw lets repo owners swap pinned plugins across four AI coding agents
Plugin4Shell exploits a Git quirk to defeat commit-hash pinning in Claude Code, Codex, GitHub Copilot, and Gemini CLI. Anthropic and OpenAI patched; Microsoft hasn't, and Google is retiring Gemini CLI instead of fixing it.









