Security News Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents TheHackerNews Daniel Bender 18 Sep 2026 Share Four AI coding agents let repository owners swap pinned plugin code; Claude Code and Codex are fixed, while Copilot and Gemini CLI remain unfixed.