You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PluginsArea: what it touches
ImprovementsKind: in v2.1.282,
ImprovementsSection of the release
What
When Claude Code evaluates a plugin, it checks the paths that the repository itself supplies. It now refuses a path that is, or leads to, a folder the system's automounter watches. An automounter is a system feature that connects to network shares when someone opens certain folders. The refused folders are:
/net, including the bare /net folder itself
/net/<host>
/Network and /home on macOS
Before, only macOS /Network counted, and where a path finally led was not checked.
Why
A malicious repository can no longer use such paths to make your computer reach out over the network.
How sure we are
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agreeFixed CLAUDE.md and rules being read at startup through a repository symlink reaching macOS's /Network via .. or a /.vol-style kernel path…
