@dgar How about some good old [CSV injection](https://owasp.org/www-community/attacks/CSV_Injection) ?😬
CSV Injection | OWASP Foundation

CSV Injection on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.