Comment by justicz

I found this bug! Here's my blog post about it: https://justi.cz/security/2021/04/20/cocoapods-rce.html

I started looking because I wanted to find bugs in Signal for iOS, which uses CocoaPods: https://github.com/signalapp/Signal-iOS/blob/master/Podfile