I was very technically impressed with xz, FWIW.
Note that the troublesome vector isn't code execution by the LLM, it's instructions to produce vulnerable code
> you are doing that for LLM code right?
Existentially weary infosec guy laughter
Well, I would be very technically impressed if someone managed to achieve any form of code execution, especially given unknown levels of quantisation post-release whereas xzutils was interesting mostly due to obfuscation.