Unclear The finding does not say what the hash is computed from or when the extra input is supplied.
What
When Claude Code works out a plugin's version, it now records where that version came from. A version that did not come from an installed plugin gets a 12-character hash added to its end, in the form -xxxxxxxxxxxx, when some extra input is supplied. Plugins from claude.ai take their version from the provided version. A log line records which kind of version was used for each plugin.
Why
You may see plugin version strings with a hash suffix. Two copies with the same stated version can then show different version strings.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
The finding does not say what the hash is computed from or when the extra input is supplied.