# Evidence generated on Sat Jan 17 21:55:55 UTC 2026 # Malicious file path: /tmp/weblate-owned-absolute-component.zip -rw-r--r-- 1 root root 58 Jan 17 21:55 /tmp/weblate-owned-absolute-component.zip # Intended output directory contents (/root/.pruva/runs/ghsa-mmwx-79f6-67jg_20260117-214540/repro-output): total 8 drwxr-xr-x 2 root root 4096 Jan 17 21:54 . drwxr-xr-x 8 root root 4096 Jan 17 21:54 .. # File preview: This looks like a ZIP but is arbitrary bytes for the PoC.