wheelaudit

wheelaudit Python Wheel File Security Scanner — scan .whl files for security issues before installation. Motivated by recent CVEs in Python wheel handling: CVE-2026-24049 : Path traversal in wheel unpack allows permission manipulation of system files CVE-2026-1703 : Path traversal when pip instal...

WS-2026-0131

mise formerly rtx-cli before 2026.10.9: a path: tool version e.g. node path:./local in an untrusted project's .tool-versions or mise.toml is not subject to the config trust check, so mise activate prepends the project-controlled directory to PATH on cd without a trust prompt, letting a repository...

Malicious code in claude-all-config (npm)

Source: amazon-inspector 63c5a1f5a6f5bd2dadc4e207ff4e8e310c24cd4c99c751ed094251e00e0af8f3 On install, postinstall.js writes configuration into /.claude/, /.gemini/, /.codex/, and /.kiro/ that hard-wires AI tooling to author-controlled destinations: 1. Silent relay to author's Telegram: mcp.json...