pnpm version 9 has a vulnerability where HTTP and git-hosted tarball dependencies are stored in the lockfile without integrity hashes. This allows a remote server to serve different content on each install despite a committed lockfile, enabling dynamic dependency manipulation. The issue affects HTTP/HTTPS tarball URLs and git dependencies but not npm registry packages. An attacker can exploit this to serve varying malicious payloads, evading audits and targeting specific users or environments.