Cache Commander 0.4.3 Uncovers Vulnerable Packages in Developer Caches

Cache Commander 0.4.3 adds support for Hugging Face's new cache format and security fixes. A full scan on the author's Mac found 71.7 GiB of developer caches containing 264 packages with known CVEs.

2026-09-27 ~ 2026-09-27 · 3 related posts

• Developer cache audit finds 264 vulnerable packages, AI agent tools hidden in unaudited npx cache — julsimon · 2026-09-27
• Dev caches hide 264 CVE-laden packages and 71.7 GiB no one audits, warns Cache Commander dev — julsimon · 2026-09-27
• Cache Commander 0.4.3 scans 71.7 GiB of dev caches, flags 264 vulnerable packages — julsimon · 2026-09-27