syzzer·hace 5 años·discuss> Upload a package to PyPI or Node.js that emits specially crafted console output as part of its installer.If someone runs my installer without checking the contents, why would I need UTF-8 bugs to get code executed?(Not meant to downplay this bug, but the example made me wonder...)
If someone runs my installer without checking the contents, why would I need UTF-8 bugs to get code executed?
(Not meant to downplay this bug, but the example made me wonder...)