Understanding Plugin4Shell: An Exploit That Uses a Simple Git Trick to Fool AI Coding Agents
A git branch named after a commit hash was enough to make AI coding agents run unverified plugins. I reproduced the Plugin4Shell trick on GitHub and Forgejo.