Malicious code in mecurial (npm)

The package mecurial was found to contain malicious code...

MAL-2025-26135 Malicious code in mecurial (npm)

The package mecurial was found to contain malicious code...

Remote Code Execution (RCE)

Mecurial is vulnerable to remote code execution RCE. The hg serve --stdio command allows a malicious user to launch the python debugger to execute arbitrary python code by using --debugger as the target repository...