AINewsnow

Plugin4Shell Lets Repository Owners Swap Pinned Agents Across LLMS

This story is from 2026-11-05. It is preserved in the archive; the latest stories are on the live feed.

Do/How you scan your AI Addons (Skills, Plugins, MCP, MODs, etc) in your day 2 day work? This kind of Plugin4Shell attack Im not sure if the top scanner (ciso, nvidia etc) would catch it

Read the full story at r/artificial ↗

Timeline · 1 report

  1. 2026-11-05 16:08 · r/artificial
    Plugin4Shell Lets Repository Owners Swap Pinned Agents Across LLMS

More stories

  1. Chinese Firms Cleared to Buy Nvidia H200 Chips Despite Empty Offices and Sanctions Ties — New York Times AI
  2. Nvidia CEO Jensen Huang faces congressional briefing request over alleged Chinese spy ties — Axios AI+
  3. DeepSeek V4.1 Flash gains traction across local rigs, benchmarks, and serving platforms — Vercel Blog
  4. Microsoft winding down deal to rent AI cloud capacity from Oracle — Bloomberg AI
  5. Nasdaq Suffers Worst Day in 18 Months as Nvidia Slides on AI Chip Selloff — The Globe and Mail
  6. Report: China's spy agency recruited executive to target Nvidia CEO Jensen Huang — New York Times AI
  7. Not Nvidia. Not Palantir. The Midterms Just Made This Magnificent Artificial Intelligence (AI) Stock the Safer Bet. — The Globe and Mail
  8. TSMC weighs move into 3D DRAM manufacturing at Nvidia's request — Techmeme

Get the daily brief of stories like this at 6:30 every morning →