--- title: StepSecurity Now Inventories AI Agent Plugins in Your... description: StepSecurity now offers two new inventories for AI agent plugins used with Claude Code and Codex. Dev Machine Guard now lists every plugin installed on... canonical: https://daily.dev/posts/stepsecurity-now-inventories-ai-agent-plugins-in-your-github-repositories-and-on-developer-machines-siwkedecn twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: StepSecurity Now Inventories AI Agent Plugins in Your GitHub Repositories and on Developer Machines | daily.dev og:description: StepSecurity now offers two new inventories for AI agent plugins used with Claude Code and Codex. Dev Machine Guard now lists every plugin installed on... og:url: https://daily.dev/posts/stepsecurity-now-inventories-ai-agent-plugins-in-your-github-repositories-and-on-developer-machines-siwkedecn og:image: https://api.daily.dev/og/posts/sIwKedECN.png og:image:alt: StepSecurity Now Inventories AI Agent Plugins in Your GitHub Repositories and on Developer Machines og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # StepSecurity Now Inventories AI Agent Plugins in Your GitHub Repositories and on Developer Machines **[StepSecurity](https://daily.dev/sources/stepsecurity)** · 9 min read · 0 upvotes · 0 comments ## Summary StepSecurity now offers two new inventories for AI agent plugins used with Claude Code and Codex. Dev Machine Guard now lists every plugin installed on developer machines, showing its marketplace, source, versions, enablement state, and components. A separate Agent Plugins page under GitHub inventories plugins that repositories publish or enable for contributors. Dev Machine Guard reads manifests and configuration records only, never executing a plugin, hook, script, or CLI, and makes no network requests. The Dev Machine Guard inventory requires agent v1.17.0 or later. The post cites the Miasma worm's malicious SessionStart hook, 15 malicious JetBrains plugins with roughly 70,000 installs, and GhostAction's push to 345 repositories as mechanisms attackers already use. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Can a Claude Code plugin execute arbitrary code on my machine? Yes, a plugin you install can execute arbitrary code on your machine with your user privileges, according to Claude Code's own documentation. Plugin hooks run as shell commands at points in the agent's lifecycle, and stdio MCP servers run as processes on the machine. Claude Code also adds a plugin's bin/ directory to the Bash tool's PATH and runs hooks and MCP servers outside its sandbox. _Developers vetting agent plugins before installing them can track supply chain writeups like this on daily.dev._ ### How did the GhostAction supply chain attack spread to so many repositories? Two compromised maintainer accounts pushed a credential-stealing workflow to 345 repositories in automated windows that lasted only minutes. This happened when GhostAction returned in October, showing how a single compromised account can rewrite what every repository, and every plugin it distributes, ships to downstream developers. _Teams assessing exposure to maintainer-account compromises can follow incidents like GhostAction on daily.dev._ ### How many installs did the malicious JetBrains plugins get before being caught? The 15 malicious JetBrains plugins collected roughly 70,000 installations over eight months. They posed as AI-powered developer tools across seven separate publisher accounts on the JetBrains Marketplace while quietly exfiltrating the AI provider API keys developers entered into them. _Developers evaluating marketplace plugin trustworthiness can keep up with findings like this on daily.dev._ ## Similar posts on daily.dev - [Dev Machine Guard Now Inventories AI Agent Skills on Developer Machines](https://daily.dev/posts/dev-machine-guard-now-inventories-ai-agent-skills-on-developer-machines-dxyxw4plf) · StepSecurity · 1 upvotes · 0 comments - [Stop Treating Coding Agent Plugins Like Settings: Introducing Agent Plugins Repositories](https://daily.dev/posts/stop-treating-coding-agent-plugins-like-settings-introducing-agent-plugins-repositories-hh3f5zrqh) · JFrog · 1 upvotes · 0 comments - [Coding Agent Horror Stories: The 29 Million Secret Problem](https://daily.dev/posts/coding-agent-horror-stories-the-29-million-secret-problem-3aivjwf10) · Docker · 28 upvotes · 5 comments - [GitHub builds an immune system for AI coding agents running on MCP](https://daily.dev/posts/github-builds-an-immune-system-for-ai-coding-agents-running-on-mcp-kbo1bxvmn) · The New Stack · 2 upvotes · 0 comments - [AI Coding Agents Are Leaking Credentials on Endpoints](https://daily.dev/posts/ai-coding-agents-are-leaking-credentials-on-endpoints-3xkdxyadx) · GitGuardian · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#mcp](https://daily.dev/tags/mcp), [#claude-code](https://daily.dev/tags/claude-code), [#openai-codex](https://daily.dev/tags/openai-codex) [View this post on daily.dev](https://daily.dev/posts/stepsecurity-now-inventories-ai-agent-plugins-in-your-github-repositories-and-on-developer-machines-siwkedecn) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"StepSecurity Now Inventories AI Agent Plugins in Your GitHub Repositories and on Developer Machines","url":"https://daily.dev/posts/stepsecurity-now-inventories-ai-agent-plugins-in-your-github-repositories-and-on-developer-machines-siwkedecn","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/stepsecurity-now-inventories-ai-agent-plugins-in-your-github-repositories-and-on-developer-machines-siwkedecn"},"datePublished":"2026-10-27T11:24:36.340Z","dateModified":"2026-10-27T11:25:14.285Z","description":"StepSecurity now offers two new inventories for AI agent plugins used with Claude Code and Codex. Dev Machine Guard now lists every plugin installed on...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/dc7b6e076632c3d72a908c6baae2eabf?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/dc7b6e076632c3d72a908c6baae2eabf?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"StepSecurity","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"StepSecurity","logo":"https://media.daily.dev/image/upload/s--vegWii-S--/f_auto,q_auto/v1774959924/logos/stepsecurity?_a=BAMAMiWQ0","url":"https://daily.dev/sources/stepsecurity"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/stepsecurity-now-inventories-ai-agent-plugins-in-your-github-repositories-and-on-developer-machines-siwkedecn","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,mcp,claude-code,openai-codex","timeRequired":"PT9M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"StepSecurity","item":"https://daily.dev/sources/stepsecurity"},{"@type":"ListItem","position":3,"name":"StepSecurity Now Inventories AI Agent Plugins in Your GitHub Repositories and on Developer Machines"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/stepsecurity-now-inventories-ai-agent-plugins-in-your-github-repositories-and-on-developer-machines-siwkedecn#faq","mainEntity":[{"@type":"Question","name":"Can a Claude Code plugin execute arbitrary code on my machine?","acceptedAnswer":{"@type":"Answer","text":"Yes, a plugin you install can execute arbitrary code on your machine with your user privileges, according to Claude Code's own documentation. Plugin hooks run as shell commands at points in the agent's lifecycle, and stdio MCP servers run as processes on the machine. Claude Code also adds a plugin's bin/ directory to the Bash tool's PATH and runs hooks and MCP servers outside its sandbox. Developers vetting agent plugins before installing them can track supply chain writeups like this on daily.dev."}},{"@type":"Question","name":"How did the GhostAction supply chain attack spread to so many repositories?","acceptedAnswer":{"@type":"Answer","text":"Two compromised maintainer accounts pushed a credential-stealing workflow to 345 repositories in automated windows that lasted only minutes. This happened when GhostAction returned in October, showing how a single compromised account can rewrite what every repository, and every plugin it distributes, ships to downstream developers. Teams assessing exposure to maintainer-account compromises can follow incidents like GhostAction on daily.dev."}},{"@type":"Question","name":"How many installs did the malicious JetBrains plugins get before being caught?","acceptedAnswer":{"@type":"Answer","text":"The 15 malicious JetBrains plugins collected roughly 70,000 installations over eight months. They posed as AI-powered developer tools across seven separate publisher accounts on the JetBrains Marketplace while quietly exfiltrating the AI provider API keys developers entered into them. Developers evaluating marketplace plugin trustworthiness can keep up with findings like this on daily.dev."}}]} ```