One flaw in Claude Code, Codex, GitHub Copilot and Gemini CLI lets a repo owner swap a pinned plugin for malicious code, with no click needed. https://thenextweb.com/news/plugin4shell-ai-coding-agents-zero-click-rce-sha-pinning