const fs = require('fs');
const tar = require('tar-stream');
const extract = tar.extract();

extract.on('entry', (header, stream, next) => {
  const out = fs.createWriteStream(header.name); // $ Alert

  if (header.linkname) {
    fs.linkSync(header.linkname, "foo"); // $ Alert
  }

  stream.pipe(out);
  stream.on('end', () => {
    next();
  })
  stream.resume();
})

extract.on('finish', ()  => {
  console.log('finished');
});

fs.createReadStream('./bad.tar').pipe(extract);