$ the-wire · showcase
Claude Code RCE via malicious git, Cline CLI drops the JS runtime requirement
By RepoJournal · Filed · About Agentic Coding · Composed from the cited sources · methodology
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?v=4)
22 people shipped this
copyberry
@copyberry
2 cited
villahernandez-coder
@villahernandez-coder
1 cited
github-actions[bot]
@github-actions[bot]
1 cited
GitHub Actions
@actions-user
Konstantine Kahadze
@kkahadze-oai
usrnk1
@usrnk1
rekram1-node
@rekram1-node
kitlangton
@kitlangton
opencode-agent
@opencode-agent
thdxr
@thdxr
gemini-cli-robot
@gemini-cli-robot
jvargassanchez-dot
@jvargassanchez-dot
jesussamuel-byte
@jesussamuel-byte
sk09-dev
@sk09-dev
Vasco Schiavo
@VascoSch92
enyst
@enyst
Saoud Rizwan
@saoudrizwan
abeatrix
@abeatrix
lifeizhou-ap
@lifeizhou-ap
DOsinga
@DOsinga
github-actions
@github-actions
alexhancock
@alexhancock
A path-resolution flaw lets a malicious <code>git</code> executable run arbitrary code under Claude Code, while Cline restructures how plugins load across CLI, SDK, and desktop and Codex extends copy-on-select into the composer.</code>
Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable anthropics/claude-code
An uncontrolled search path lets a malicious <code>git</code> executable be resolved and executed, giving arbitrary code execution in the environment Claude Code runs in. Nothing in the report scopes which platforms or invocation paths are affected, so treat any directory you open as untrusted until a fix lands.
CLI v3.0.71 cline/cline
Plugins now load inside the hub rather than a separate node or bun process, so the CLI no longer needs a JavaScript runtime on your PATH. Failures are no longer silent: Cline prints a warning naming the plugin and error, <code>cline config tools --json</code> lists it as a <code>plugin_failure</code>, and the new <code>cline hub plugins</code> shows status and last error with <code>--reload <...
Support Command/Super shortcuts in the TUI keymap openai/codex
The TUI keymap accepts <code>super</code> modifiers and normalizes <code>cmd</code> and <code>command</code> aliases to it, across shortcuts, chords and leaders. <code>super-left</code>, <code>super-right</code> and <code>super-backspace</code> ship as editor defaults for start/end of line and delete-to-start, so Mac bindings you already expect now work.
Extend copy-on-select to composer text openai/codex
The <code>tui.copy_on_select</code> setting now covers composer mouse selections on release, including X11 PRIMARY publication when enabled, and editable selections stay highlighted so typing replaces them. Clipboard destination handling is shared across transcript, footer and composer.
fix(cli): prevent session poisoning on rapid Ctrl-C interruption google-gemini/gemini-cli
Pressing <code>Ctrl+C</code> twice quickly during tool execution or streaming used to trigger <code>/quit</code> before cancelled tool calls were written to the session log, leaving dangling <code>functionCall</code> turns without matching <code>functionResponse</code> turns in <code>session-*.jsonl</code> and breaking <code>gemini --resume</code>. Gemini CLI now awaits cancellation before quit...
