AIKIDO-2026-11056

TL;DR

pnpm maps unscoped authentication credentials such as _authToken, _auth, username/_password, and tokenHelper from one configuration source to whichever registry another source selects. A repository-local .npmrc can redirect the default registry, causing pnpm to send the user's stored credentials in an Authorization header to an attacker-controlled host during install, view, and metadata operations. Tokens issued for the user's intended registry can be exfiltrated to a different registry without explicit URL scoping. The fix pins unscoped per-registry settings to the registry declared in the same config source at load time and emits deprecation warnings for each rescoped setting.