Command injection in NLTK collocations via eval() | Hacker News Reader