github.com/Home-Assistant/core v0.0.0-20260903234408-917fcadd12b8
legitimate Home Assistant source
Archive contains path traversal entries (zip slip)Detects refusal magic string that cause Claude sessions to be terminated. This might indicate that a file tries to prevent being analyzed by LLM agents.
SHA-2569dca62f989ab1722ea7dc76b0a7ef8cbd7789497f6f28f3c46f0d3367a1351b2
URLhttps://proxy.golang.org/github.com/!home-!assistant/core/@v/v0.0.0-20260903234408-917fcadd12b8.zip
MaleculeMdTh