published 2026-09-17
A marketplace plugin can be changed after it was reviewed, and Claude Code and Codex update such plugins automatically by default, so new malicious code can arrive without a new check.
Source: theregister.com
FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 1795 and your operating system.