🧰 open

The items that name it 4

• Top AI coding agent security resources — November 2026
  article2026-11-02

  Package whose PowerShell launcher received the unescaped authorization_endpoint in opencode, leading to code execution

• 川崎元 (@foryangxin) on X
  thread2026-10-30

  npm package that opens URLs; it received the server-controlled authorization_endpoint and on Windows launched it through PowerShell.

• David Gutierrez | Eng (@david_x_ai) on X
  thread2026-10-25It is written here as open (npm package): helper used to open URLs in the browser.

  npm package

• Santhosh Patel (@santhosh_patell) on X
  thread2026-10-19It is written here as open (npm package): opens URLs, passed the server-supplied login URL to PowerShell.

  npm package