A flaw dubbed Plugin4Shell shows that the SHA pinning Claude Code, Codex, GitHub Copilot and Gemini CLI use to secure plugins could be bypassed without a click or a prompt - with sharply differing responses from the four vendors.