SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Plugin4Shell Flaw Let Attackers Hijack AI Coding Agents via Broken SHA Pinning

0
·1 views

Security researchers disclosed a vulnerability class called Plugin4Shell in September 2026, affecting four major AI coding tools: Claude Code, Codex, Gemini CLI, and GitHub Copilot. The flaw stems from a broken SHA-pinning verification process, which is meant to lock plugins to a specific, audited commit hash to prevent unauthorized code changes. Because these agents auto-update plugins silently by default, attackers could swap a legitimate plugin for malicious code after initial approval without any user interaction. Once swapped, the malicious plugin runs with the agent's full permissions, potentially exposing filesystems, credentials, CI pipelines, and cloud accounts. The vulnerability mirrors npm and PyPI supply-chain attacks but carries a larger blast radius due to the broad local and network privileges routinely granted to agentic coding tools.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Developer finds SDK retried LLM calls twice despite explicit retry disable setting

A developer building an AI coding agent discovered that disabling retries at the harness level did not prevent the underlying OpenAI Node SDK from making its own default two retries, resulting in three server requests instead of one. To enforce a strict single-request policy, they implemented a fetch-level guard injected via NODE_OPTIONS, which initially passed local tests. However, end-to-end testing revealed the guard was being silently overwritten at startup by undici.install(), which reassigns globalThis.fetch, rendering the protection ineffective. The fix involved using Object.defineProperty to make the fetch property non-configurable, ensuring all requests always pass through the guard while still allowing the underlying fetch implementation to be swapped internally. The investigation also surfaced an unplanned analytics request to a PostHog telemetry endpoint, highlighting the importance of testing the full binary rather than individual library components in isolation.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Security Report Flags High-Risk Flash Loan Vulnerabilities in EigenCloud DeFi Protocol

A technical security audit of EigenCloud, a DeFi liquidity-aggregation protocol managing approximately $7.04 billion across Ethereum and multiple Layer 2 networks, has identified six flash loan attack vectors as of its v2.3.1 mainnet deployment. The report, dated September 25, 2026, assigns EigenCloud an aggregate flash loan risk score of 7.4 out of 10, classifying it as high risk. The most severe findings include unprotected price oracle updates that can be manipulated within a single flash loan transaction, a re-entrancy vulnerability in the flash loan router's callback function, and insufficient slippage controls on internal batch swaps. Auditors noted that EigenCloud's oracle aggregation logic lacks time-weighted price smoothing, making it susceptible to temporary price manipulation that could trigger under-collateralized liquidations or erroneous reward payouts. The report recommends immediate remediation of the oracle integrity, re-entrancy, and slippage issues, alongside a longer-term security hardening roadmap.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Vowel estimator accuracy skewed by audio order and duration, developer finds

A developer building a browser-based vowel estimator for VRM avatar lip-syncing discovered that evaluation results were being distorted by the measurement method itself rather than true estimator performance. Because the estimator tracks a long-term average of frequency-band levels that updates with each audio input, the same sound produces different feature values depending on what was heard before it. Evaluation audio was synthesized using Style-Bert-VITS2 across three speakers and five Japanese vowels, then mechanically screened for length, RMS, peak, voicing rate, and formant quality before use. Pitfalls included misleading peak normalization flagged as clipping and LPC-based formant estimation picking up harmonics for high-pitched speakers, prompting a direct spectral analysis instead. A leave-one-speaker-out validation scheme was also applied to ensure results were not artificially inflated by speaker overlap between template design and evaluation data.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer finds 23% of Dev.to articles silently deleted after building custom data scraper

A developer discovered that 235 of their 847 supposedly published Dev.to articles had been quietly soft-deleted by the platform between 2019 and 2023, with no user notification. The discrepancy only came to light after the developer built a custom Python scraper using the standard library alone, bypassing third-party packages to pull nine years of personal posting history. The project also exposed a memory management problem with Dev.to's API, where joining article data with reactions and comments caused in-memory JSON to balloon from roughly 510 MB to several gigabytes, crashing an 8 GB cloud instance. To solve this, the developer restructured the workflow as a streaming pipeline with bounded queues, batched writes, and a token-bucket rate limiter, all without external dependencies. The build highlighted how platform-reported metrics can diverge significantly from a user's actual content record.

0 comments Read more at DEV Community