Command injection in NLTK collocations via eval() | Dark Hacker News