Start for Free
npm

@earendil-works/pi-coding-agent

View on npm registry
4 Total advisories
4 Vulnerabilities
0 Malware

Vulnerabilities

LOW 2.2
npm

CVE-2026-54327

Pi Agent: Race condition in Pi auth.json writes could expose stored credentials
MEDIUM 4.4
npm

CVE-2026-54325

Pi Agent: Pi loads project-local extensions without approval
HIGH 7.3
npm

CVE-2026-54328

Pi Agent: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts
LOW 2.5
npm

CVE-2026-54326

Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes