pickle.py (1,962), tarfile.py (3,171), zipfile/init.py (2,391), shutil.py (1,670), tempfile.py (977), pdb.py (3,707), contextlib.py (797), configparser.py (1,415)
Invalid uid/gid/size/mtime in PAX headers → silently replaced with 0. size=0 truncates extracted files. uid=0 means root ownership. Security-relevant.