Skip to content
T threat.cafe

Tag

#plugins

1 post

  1. · Nadia Ferreira-Strand · Agent artifact supply chain · on threat.cafe

    Pinned isn't verified: Plugin4Shell, trojanized hook updates and the update path nobody reviews

    Teams review an agent plugin once, at install. September 2026 research showed how updates can swap pinned code, add malicious hooks and run out of sight. Here is a runbook for the update path.