AIKIDO-2025-10684

TL;DR

Affected versions of this package are vulnerable to improper input validation, specifically in the generator package installation commands, where unsafe string interpolation allowed command injection. An attacker could exploit this by crafting malicious inputs, such as specially crafted package names or arguments, that bypass validation and execute arbitrary commands on the host system, potentially leading to unauthorized access or system compromise.