Oren Yomtov on X: “Fun fact: we implemented this config option as part of the mitigation …”

A fast, private reader for public X posts. No account, no tracking, no pop-ups.

PeekX is an independent tool and is not affiliated with, endorsed by or sponsored by X Corp. “X” and “Twitter” are trademarks of their respective owners. We only show posts that their authors made public and never access private or protected accounts. Downloaded media belongs to its creators — please respect their rights.

Username or post link

Home / @orenyomtov / Post

Oren Yomtov

@orenyomtov

Fun fact: we implemented this config option as part of the mitigation for the script execution bypass vulnerability I disclosed to pnpm (CVE-2025-69264)

Rami McCarthy@ramimacisabird · May 12

Everyone is tweeting out "use pnpm & set a minimumReleaseAge of 7 days"

but don't forget blockExoticSubdeps - which would also prevent the usage of a remote github reference here!

Open quoted post →

May 13, 2026, 1:27 PM UTC

1 7

Download media

Every quality X serves, straight from X's media CDN. No watermark, no wait.

OriginalBEST

Photo · 1038×556

Save & share

Turn this post into a clean image, or copy it as text or Markdown.

Open on X

Oren Yomtov on X: “Fun fact: we implemented this config option as part of the mitigation …” | PeekX