Comment on Supply-chain attack using invisible code hits GitHub and other repositoriesparentComments−sigseg1v5moWhat about for languages that allow pretty much anything in identifiers or variables. JS for example. Or bash. Don't need eval to do anything crazy there.
Comments
What about for languages that allow pretty much anything in identifiers or variables. JS for example. Or bash. Don't need eval to do anything crazy there.