Developer cache audit finds 264 vulnerable packages, AI agent tools hidden in unaudited npx cache

julsimon · x · 2026-09-27

The author released Cache Commander 0.4.3, adding support for Hugging Face's new cache format plus security fixes.

A full scan on his Mac turned up 71.7 GiB of developer caches, including 264 cached packages with known advisories. The new HF cache format stores each large file in one place and links it into every repo, which made his old build miss 1.5 GiB — model folders looked empty.

The worst offender was the npx cache: an MCP filesystem server dating to September 2025 carries 22 vulnerable dependencies, alongside 8 copies of chrome-devtools-mcp (1.0.1–1.6.0, latest 1.10.1). His point: your AI agent's tools live in a cache nobody audits. Install via brew install juliensimon/tap/ccmd on Mac/Linux.

Related event: Cache Commander 0.4.3 Uncovers Vulnerable Packages in Developer Caches(3 posts)→

Original post →

More from Infra

Infra channel →