Claude Code 2.1.269 fixes plugin archives being extracted world-readable on shared machines

Claude Code Changelog·high signalXBlueskyLinkedInCopy link

Plugin archives extracted for a session were readable by other local users, extracted files kept world-writable bits straight from the archive, and stale files survived re-extraction. On a shared host that meant any local user could read a plugin's contents, and a world-writable extracted file was a straightforward hijack of code the agent loads. The same release also fixed plugin and marketplace errors printing a token or password embedded in a git source URL.