AIKIDO-2026-242498

TL;DR

When pnpm installs with the hoisted node linker, it rebuilds the dependency graph from the lockfile and joins each dependency alias directly under a node_modules directory. On an up-to-date or frozen lockfile the resolution step is skipped, so alias validation never runs and a crafted alias is used as a raw path component. A malicious lockfile alias containing path-traversal segments can escape the install root, and reserved aliases such as .bin, .pnpm, or node_modules can overwrite pnpm-owned layout, letting package files land outside the intended directory. The fix validates every alias at the directory sink and adds an always-on lockfile verification gate that rejects invalid dependency aliases before any fetch or filesystem work.