Socket on Mythryl: “pnpm 11.10 adds a new _auth setting that ties each registry…”

pnpm 11.10 adds a new _auth setting that ties each registry credential to its host, so a malicious or compromised repo file can't redirect your token to a different server. The release also hardens pnpm deploy, pack-app, and more. socket.dev/blog/pnpm-11...

socket.devpnpm 11.10 Hardens Registry Authentication to Block Token Re...pnpm 11.10 hardens registry auth to block token redirection, tightens pack-app and deploy, and makes the Rust port (v12) installable.

8/7/26, 7:24 am4 reposts20 likes

Post