• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    AI coding agent git checkout via plugin install (Plugin4Shell)

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Ibrahim Saud@tektrix
    •updated 21 days ago•2•0•4

    Detects the execution of git checkout commands initiated by known AI-powered coding assistants or CLI tools. This behavior may indicate an AI agent or automated script interacting with source code repositories in an unexpected or potentially unauthorized manner.

    Microsoft Sentinel (KQL)

    Tags

    T1059 - Command and Scripting InterpreterT1204 - User ExecutionTA0002 - ExecutionProcess CreationCommand ExecutionWindowsWindows Defender Atpkql

    Found in

    • Plugin4Shell: AI Coding Agent Supply Chain VulnerabilityLast updated 21 days ago
    • Plugin4Shell: AI Coding Agent Supply Chain VulnerabilityLast updated 21 days ago
    • Plugin4Shell: AI Coding Agent Supply Chain VulnerabilityLast updated 21 days ago
    • Plugin4Shell: AI Coding Agent Supply Chain VulnerabilityLast updated 21 days ago
    • Plugin4Shell: AI Coding Agent Supply Chain VulnerabilityLast updated 21 days ago

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?