“Supply Chain Security and Tar”:
https://www.openwall.com/lists/oss-security/2021/10/03/1

A “malicious actor [can] create a single tar archive which leads to different file outputs based on the implementation in use.”
#infosec