snare26 days ago

snare v1.4.2 released — four false positives out, four real ways in

Found by running 1.4.1 against a real repository rather than a fixture. The false positive node\s+.*(-e|--eval) left the flag unanchored, so atlas-engine matched. An honest PostToolUse hook running packages/atlas-engine/hooks/atlas-tag.ts was reported as *"an agent hook runs a dr

Published October 13, 2026 · 12:42 AM
Found by running 1.4.1 against a real repository rather than a fixture. The false positive node\s+.*(-e|--eval) left the flag unanchored, so atlas-engine matched. An honest PostToolUse hook running packages/atlas-engine/hooks/atlas-tag.ts was reported as *"an agent hook runs a dr
Read

Source: snare

Ask AI about this articleBeta

The AI only has access to this article — it won't make up facts. Try:

AI can be wrong. Cross-check before sharing.

Supporting evidence0 items
Community check0 comments
No votes yet
0% real0% fake