AI Coding Agent Security: Plugin4Shell and ZCode Explained
Two September 2026 incidents break two different assumptions that developers make about AI coding agents: Plugin4Shell showed that a plugin pinned to a reviewed version can still run different code, and ZCode showed that a privacy toggle and a priva…