Plugin4Shell is a zero-click RCE hitting every major AI coding agent via a SHA pinning bypass. Claude Code and Codex are patched; Copilot and Gemini CLI are not.

#Plugin4Shell #AIsupplychain #CodingAgents #ClaudeCode #ZeroClickRCE #SHApinning #AIsecurity