The Month AI Coding Agents Became the Supply Chain Attack

Three separate 2026 findings — the GuardFall shell-injection class, a poisoned Claude Code GitHub Action, and hallucinated packages installed on autopilot — point at the same thing: the agent with a shell is the new attack surface.