CLAIM-2026-09-21-04

The attack is zero-click because marketplaces bump their pinned SHA and agents re-run the checkout in the background without user action.

Why it matters

It means the install-time review is not the exposure window; the update path is.