Interesting hypothesis. What makes it somewhat implausible is the fact that he got lower-case j's. Also, echo '{"foo":"bar"}' | jq -r '.foo' | xxd -p giv

Interesting hypothesis. What makes it somewhat implausible is the fact that he got lower-case j's. Also, echo '{"foo":"bar"}' | jq -r '.foo' | xxd -p gives me 6261720a (i.e. bar\n), so I don't quite see how he could have gotten j's (or J's for that matter) injected into that pipeline. Maybe with some weird/broken locale settings?