github.com/home-assistant/core v0.0.0-20260903234408-917fcadd12b8
legitimate home assistant core
Archive contains path traversal entries (zip slip)Detects refusal magic string that cause Claude sessions to be terminated. This might indicate that a file tries to prevent being analyzed by LLM agents.
SHA-256dcf6768d0acc207e119c461e3a83323cb3008e2ca46c2637a5bad354768e5cbf
URLhttps://proxy.golang.org/github.com/home-assistant/core/@v/v0.0.0-20260903234408-917fcadd12b8.zip
MaleculeMdTh