Auditing Plugin4Shell Auto-Load Paths in Claude Code, Codex, Copilot, and Gemini CLIpr0h0•9/19/2026securityai-coding-agentsrcesupply-chaindeveloper-tools
Why a GitHub Repo Is Not a Trust Signal: The Rapuncel LastPass Campaignpr0h0•9/19/2026securitymalwaregithubsupply-chainlastpass
Docker Sandboxes macOS Host Escape: What Guest Code Can Read and Modifypr0h0•9/18/2026dockercontainer-securitymacossandbox-escapedevsecops