Comment by rmbyrro

Isn't this already a reality with wget, curl, and even package managers like pip and npm?

I mean, any script on my machine can use these tools to interact with network input and execute untrustworthy code...