A flaw in four widely used AI coding agents lets someone who controls a plugin’s code repository swap the plugin […]