In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-60936.json"