Infrastructure
Plugin4Shell Bypasses SHA Pinning Across All Four Major AI Coding Agents
AIR Security discloses the first supply-chain vulnerability of the AI agent ecosystem – a zero-click RCE that defeats version pinning with one missing verification check. GitHub Copilot remains unpatched.
◆ Blair Hayes