Field notes and proof.

Threat ResearchSep 12, 2026 · 9 min read

A pristine file, a directory name, and arbitrary code

Original research into a build tool’s shell output: why it looks inert in review, how far it actually reaches, and the one substitution that fixes it.

“A folder name is the whole exploit.”