When Your AI Coding Plugin Starts Picking Your Dependencies: Marketplace Skills and Dependency Hijack in Claude Code

This piece cautions that third-party plugins for AI coding assistants can surreptitiously alter dependency installation to attacker-controlled sources, embedding trojanized libraries that persist across sessions and expand the software supply chain attack surface. It references a SentinelOne Prompt Security blog that demonstrates how a benign-looking dependency skill can exfiltrate secrets or lie dormant, emphasizing the heightened trust and risk these marketplace plugins introduce.