CVE-2026-73036: Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt

Bash-it version 3.2.0 has a vulnerability where a malicious pyproject.toml file can inject terminal escape sequences (special codes that control terminal behavior) into the command prompt. When a user enters a directory with this malicious file, the unfiltered content gets added to the prompt without removing these control characters, causing the terminal to execute unwanted commands every time the prompt appears.