Plugin-Security on subagentic.ai https://subagentic.ai/tags/plugin-security/ Recent content in Plugin-Security on subagentic.ai Hugo -- 0.147.7 en-us Mon, 13 Apr 2026 20:06:00 -0700 Claude Code's Vercel Plugin Quietly Collected Bash Commands — A Developer Used Claude to Expose It https://subagentic.ai/posts/claude-code-vercel-plugin-bash-commands-data-collection/ Mon, 13 Apr 2026 20:06:00 -0700 https://subagentic.ai/posts/claude-code-vercel-plugin-bash-commands-data-collection/ A Vercel plugin bundled with Claude Code reportedly captures bash commands and session data in unrelated projects — raising plugin supply-chain safety concerns. How to Audit and Lock Down Claude Code Plugins: A Supply Chain Safety Checklist https://subagentic.ai/howtos/how-to-audit-claude-code-plugins-supply-chain-safety-checklist/ Mon, 13 Apr 2026 20:06:00 -0700 https://subagentic.ai/howtos/how-to-audit-claude-code-plugins-supply-chain-safety-checklist/ A practical checklist for auditing Claude Code plugins and protecting your session data, bash commands, and credentials from unauthorized collection.