CodexCodex plugins
Best Codex Plugins in 2026
The best Codex plugins in 2026 from HOL's scan data: 10 picks with a Safe security label, real GitHub stars, verified install commands, example prompts, and honest pros and cons.
HOL GuardHOL GuardMore from HOL Guard
Page 1 of 10
BreakingCVE
PHP2Shell is now on CISA's exploited list. Patch PHP by Oct 29 and check for a break-in before you restart (CVE-2026-109618, CVE-2026-109619)
How to fix CVE-2026-109618: upgrade PHP to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 and restart every worker. CISA added both PHP2Shell bugs to KEV on Oct 26 with an Oct 29 deadline and forensic triage, so save logs and the process list before the restart.
HOL Guard
HOLAI agents
What is HOL? Open infrastructure for AI agents
HOL, short for Hashgraph Online, builds open infrastructure for AI agents: HOL Guard for runtime agent security, the Plugins Registry, the Registry Broker and open HCS standards for agent identity and discovery.
HOL
Plugin scannerHOL guard
What is the HOL Plugin Scanner? Checks for agent plugins before release
The HOL Plugin Scanner, published on PyPI as plugin-scanner, is an open-source CLI and GitHub Action that checks AI agent plugins, skills and MCP configs for security and quality problems before you publish.
HOL Guard
HOL guardAI agent security
What is HOL Guard? A local checkpoint for AI agent actions
HOL Guard is an open-source, local-first security layer for AI agents. It reviews shell commands, file access, package installs and MCP tool calls before they run, then allows, blocks or asks you to approve.
HOL Guard
BreakingCVE
One gzipped POST crashes Express via body-parser CVE-2026-111181. Upgrade to 1.20.9 or 2.4.0
How to fix CVE-2026-111181: upgrade body-parser to 1.20.9 or 2.4.0. Trailing bytes after a compressed request body crash the Node process before routing runs.
HOL Guard
BreakingRailway
Railway breach exposed customer environment variables. Rotate every secret you stored in Railway
How to fix the Railway environment variable breach: rotate every secret stored in Railway variables, move funds out of any wallet key kept there, and check provider logs for use of the old keys. Railway says an intruder reached encrypted env vars and decrypted some; stolen wallet keys were drained before the notice.
HOL Guard
BreakingCVE
Node.js CVE-2026-111497 lets one malformed Brotli body corrupt memory through fetch(), Express 5 and zlib
How to fix CVE-2026-111497: upgrade Node.js to 22.23.4, 24.22.1 or 26.12.1. A malformed Brotli stream makes the bundled decoder write past a buffer, and fetch(), Express 5 body parsing and zlib all reach it.
HOL Guard
BreakingCVE
GitLab CVE-2026-110264 lets attackers run code on self-managed servers with no login, even ones patched Oct 12
How to fix CVE-2026-110264: upgrade GitLab to 19.5.1, 19.4.3, 19.3.6, or the 19.2.9, 19.1.9, 19.0.10 and 18.11.13 backports. A crafted Org-mode file gives no-login code execution on self-managed GitLab, and servers patched on October 12 are exposed again.
HOL Guard
CVEGo
eMudhra CA keys leaked: forged HTTPS certs still pass in old Go, Python, Node.js and Java (CVE-2026-111943)
How to fix CVE-2026-111943: upgrade Go to 1.27.3 or 1.26.10 and rebuild, then update certifi to 2026.10.19, Node.js to 22.23.4, 24.22.1 or 26.12.1, and your ca-certificates. Eight eMudhra intermediate CA keys can be recovered from the public certificates, so non-browser clients will accept forged HTTPS for any site.
HOL Guard
BreakingSupply chain
LiteLLM 1.107.0 on PyPI and Docker latest shipped a credential stealer. Pin 1.106.2 and rotate your AI keys
How to fix the LiteLLM 1.107.0 compromise: pin litellm to 1.106.2, rebuild from a clean image, and rotate every key the host could read. All 1.107.0 wheels on PyPI and the Docker latest, main-latest and main-stable tags shipped a credential stealer that also dumps the proxy's stored provider keys.
HOL Guard
BreakingCVE
PHP2Shell lets attackers run code on PHP web servers with no login. Update PHP now (CVE-2026-109618, CVE-2026-109619)
How to fix CVE-2026-109618: upgrade PHP to 8.5.12, 8.4.27, 8.3.36 or 8.2.35, then restart Apache and PHP-FPM. PHP2Shell (CVE-2026-109618 and CVE-2026-109619) lets attackers run code on PHP web servers with no login. PHP 8.1 and older get no upstream fix.
HOL Guard
BreakingCVE
Plex Media Server hijacked without a login to mine crypto and run proxies, now on CISA KEV (Plex2Shell, CVE-2026-96652)
How to fix CVE-2026-96652: upgrade Plex Media Server to 1.43.3.10861 or later. The Plex2Shell chain (CVE-2026-96652, -96654, -96655, -96656) is exploited to install crypto miners and proxies, on CISA KEV Oct 20. Updating does not remove an infection.
HOL GuardKeep exploring
The engineering desk continues across the ecosystem: security research on shipping agents safely, and plugins that put the standards to work.