4 Coding Agents Pinned Plugins to a Commit SHA. A Branch With the Same Name Won
8.5 relevance
Score Breakdown
technical depth 8
novelty 9
actionability 9
community 7
strategic 8
personal 10
Scored daily by a customisable AI persona to surface the most relevant engineering leadership news.
Novel security vulnerability in coding agents with actionable fix, highly relevant.
Summary
Plugin4Shell: Claude Code, Codex, Copilot and Gemini CLI ran git checkout and never checked HEAD. Reproduce it locally and add the one-line fix.