🎯 Plugin4Shell

The items that name it 4

• Richard Abishai (@richardabish_ai) on X
  threadas tools2026-10-09It is written here as Plugin4Shell (name of a zero click remote code execution bug affecting major coding agents).

  name of a zero click remote code execution bug affecting major coding agents

• Top AI Coding Agent Security Resources — October 2026
  articleas classification.key entities2026-10-02
• Top 10 attacks on Claude Code and what each one actually broke
  writeupas techniques2026-09-23It is written here as Plugin4Shell (SHA-pin bypass via branch/commit name collision).

  Claude Code checks out a pinned plugin commit SHA but never verifies the checkout landed there; an attacker creates a branch on their plugin repo named identically to the pinned SHA and makes it default, so git resolves the ambiguous reference and the attacker's tree is checked out; exploitable zero

• Plugin4Shell - Zero Click RCE Vulnerability found in top 4 most popular coding agents, millions of agents affected
  writeupas classification.key entities