Hacking fun with zip-slips, tar-slips, symlinks, hardlinks, collisions, and more

I was recently reading Max Justicz’s blog post , where he outlined how he was able to hack the unpkg.com CDN by getting the service to extract a tar file which contained: