BreachFeed
company

Anthropic

Tracked by 2 people · Artificial Intelligence (AI)

Track Anthropic

Incident history

The Hacker News·
Share

Link — click to select, then copy:

https://breachfeed.com/article/cmu70t32o00vwhnu2wnyls9x9

Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents

A flaw in four widely used AI coding agents lets someone who controls a plugin's code repository swap the plugin an agent installs for a malicious one, even when the agent locked that plugin to a specific reviewed version, security firm Air Security said on Thursday. The firm said Anthropic has patched the flaw in Claude Code 2.1.179 and OpenAI in Codex 0.146.0, that GitHub Copilot has no

Community chatter

Reddit and X posts mentioning Anthropic — unverified discussion, often ahead of the press.