1base ../../../../evil 2author Attacker 3email evil@example.com 4date 2026-01-01 5name Evil Plugin 6desc Tries to escape the plugin directory via a traversal base name 7url http://example.com/plugin:evil 8