A branch named after a commit let attackers swap out "pinned" plugin code in AI coding agents, with no click required. What happened, how to reproduce it safely on your own machine, who's still exposed, and how to set up alerts so you hear about the next vulnerability early.
