Virtualenv: Seed Replacement Does Not Contain Metadata Deletion Paths

Summary The app-data seeder joins paths from existing distribution metadata to site-packages and deletes the resulting paths without checking containment within the environment. Anthropic's OSS Scanner reported this as "ANT-2026-SXOEHWP7" in "virtualenv-20261015-005", received on 15 October 2026...