{"type": "article", "title": "A 1,145-Star CLI Promised \"Nothing Leaves Your Machine\". It Executes a Hidden Payload at Import Time.", "publisher": "Web Pulse", "url": "https://wpnews.pro/news/a-1145-star-cli-promised-nothing-leaves-your-machine-it-executes-a-hidden-at", "original_source": "https://dev.to/felixwang007/a-1145-star-cli-promised-nothing-leaves-your-machine-it-executes-a-hidden-payload-at-import-2npd", "published": "2026-09-21T04:13:28+00:00", "accessed": "2026-09-21", "id": "a-1145-star-cli-promised-nothing-leaves-your-machine-it-executes-a-hidden-at"}