SHA Pinning Did Not Save the Plugin Install
Air Security's Plugin4Shell hits Claude Code, Codex, Copilot, and Gemini CLI. Two vendors patched. Copilot is disputed. AI commits still leak secrets at 2x.
Air Security's Plugin4Shell hits Claude Code, Codex, Copilot, and Gemini CLI. Two vendors patched. Copilot is disputed. AI commits still leak secrets at 2x.
Emergent just became the latest AI coding startup to hit a $1B+ valuation, raising $130M barely a year after launch. But the real story isn't the money — it's who's using these tools and why embedded AI might matter more than standalone agents.
The Godot game engine now prohibits AI-generated pull requests and 'vibe coding.' It's not the first open-source project to draw this line, but the reaction reveals a deeper split in how developers feel about AI in their workflow.
AI-native IDEs aren't just traditional editors with autocomplete — they're reimagining the entire development experience around AI collaboration. Here's how Cursor, Windsurf, and GitHub Copilot are reshaping software development.