W-23795493-resolve npm from PATH only, not CWD - #902

Merged

WillieRuemmele merged 2 commits into

mainfrom

Aug 13, 2026

Commits on Aug 10, 2026

fix: reject npm resolved from CWD to prevent executable hijacking on Windows
soridalac
committed
5b49be0
fix: use dirname check
soridalac
committed
108ca76