[APPSEC-535] Malicious package can overwrite system files

Attacker could publish a malicious extension package. When the package was installed by a customer, it could overwrite files on the server. The attacker must first publish a package, and then enticed a customer to install it. The package might contain a malicious load, as well. Part of patch SUPEE-5994 Weiterlesen: [APPSEC-535] Malicious package can overwrite system files