Claude Code 2.1.289 closes a second route past its rm guard, and stable is four builds behind

T2Covered by 1 source · first reported by UploadVR / Road to VR / MIXED at 05 Oct, 01:54 UTC

Claude Code 2.1.289 reached npm on October 3 at 20:12 UTC, and it closes a second route for a deletion command to slip past the permission check that is supposed to stop it. Anthropic's changelog describes the fix as "Fixed Bash deny and ask rules missing a command behind an environment variable…