AIR Security

https://www.air.security/blog

Added 2026-09-22 as this run's single new candidate (S3). First-of-its-kind primary research on AI-coding-agent supply-chain security ("SkillJacking"/RepoJacking at scale; this run's Plugin4Shell zero-click plugin SHA-pinning bypass across Claude Code, Codex, Copilot and Gemini CLI), a growing, highly technical attack surface not covered by any other source in the current slice, directly relevant to an audience that itself relies on these coding agents. Promote to active after 3 contributing runs. | 2026-09-22: RECIPE FIX, the /blog-posts listing URL 404s (that path only resolves per-article, e.g. /blog-posts/plugin4shell); the working listing page is /blog, confirmed live with dated article links including plugin4shell, skilljacking, repojacking, mcpjacking. | 2026-10-14 intel run: recipe: extract of the blog index shows a single card; `url https://www.air.security/blog` gives the /blog-posts/<slug> links, then extract each post for its date. | 2026-10-19 intel run S3: `url https://www.air.security/blog` raw HTML carries the date next to each /blog-posts/<slug> anchor; `extract` of a post returns a reliable date field. | 2026-10-23 (S3): only marketing posts inside the lookback (PHP2Shell in agent skills); candidate for demotion at the next audit.