Config files that execute code are everywhere
YAML, TOML, and JSON parsers can run arbitrary code during deserialization. Most dependency scanners miss them entirely.
Read the note 1 min read
From the notebook
dependencies.
1 note on this topic.