Plugin4Shell Bug Hit AI Coding Agents A flaw in Codex, Claude Code, Gemini CLI and Copilot let attackers swap a trusted plugin for malicious code, no developer click required.
Claude Code Stops Asking Permission Anthropic is flipping Claude Code's auto mode on by default, so the coding agent runs more actions without pausing for your approval each step.