A single git trick beat the safety lock on four AI coding agents

The AI industry already knew attackers could poison plugin marketplaces. Its answer was to lock every plugin to one reviewed version of its code. Researchers at Air Security published a vulnerability on Thursday that they call Plugin4Shell.