(#15841) Add tar unpacking security checks

Add cheks to ensure no file from the module tarball is written
outside of the module directory.