A malicious Claude Code extension delivered through Cursor's supply chain shows how poisoned developer extensions abuse agent permissions, and how teams can audit installs, pin versions, and lock down update channels.
Plugin4Shell is a zero-click remote code execution flaw that abuses plugin and workspace auto-load paths in Claude Code, Codex, Copilot, and Gemini CLI, leaving two agents unpatched and forcing developers to rethink how they sandbox AI coding tools.
This post explains how AI coding agents can be manipulated by deceptive terminal output in Bash and similar tooling, and outlines the fixes needed to reduce supply-chain risk.
This post explores how malicious prompt injection can be executed via pull request comments in AI-powered coding agents, highlighting security risks and mitigation strategies.
AI coding agents can turn PR descriptions, comments, and other repository text into prompt-injection vectors unless workflows strictly limit permissions, secrets, and tool access.