One quoted tilde in your .bashrc is an attacker-controlled PATH entry
export PATH=\"$PATH:~/.local/bin/\" — the quotes stop tilde expansion, the entry resolves against your current directory, and anyone who can create a ~ folder there owns your shell. Verified live.
→ https://blog.slabb.dev/en/one-quoted-tilde-in-your-bashrc-is-an-attacker-controlled-path-entry
Journal de bordOne quoted tilde in your .bashrc is an attacker-controlled PATH entryexport PATH=\"$PATH:~/.local/bin/\" — the quotes stop tilde expansion, the entry resolves against your current directory, and anyone who can create a ~ folder there owns your shell. Verified live.
commit c8c2655