Four major AI coding agents, Claude Code, Codex, Copilot and Gemini CLI, all share the same zero-click remote code execution ...
By exploiting how AI coding agents retrieve and verify plugins, researchers were able to execute malicious code even when the agent was told to use a trusted, approved version.