A supply chain vulnerability in four AI coding agents allowed repository owners to substitute malicious plugins for legitimate ones despite version pinning, affecting Claude, OpenAI Codex, GitHub Copilot, and JetBrains AI Assistant.
Summary is Secursion's own; full text lives at the source. Attribution preserved.