Patched code sample

import os
import zipfile

def check_path(base_path, target_path):
    return os.path.realpath(target_path).startswith(os.path.realpath(base_path))

def check_for_exec(script):
    blacklist = ["import", "os", "sys", "subprocess", "eval", "exec", "__import__", "open", "write", "exit"]
    for item in blacklist:
        if item in script:
            return False
    return True

def extract_and_execute(zip_file):
    extraction_path = "/extraction/path"

    with zipfile.ZipFile(zip_file, 'r') as z:
        for member in z.namelist():
            member_path = os.path.join(extraction_path, member)
            if not check_path(extraction_path, member_path):
                raise Exception("Unsafe path detected in ZIP file.")
        z.extractall(extraction_path)

    script_path = os.path.join(extraction_path, "script.py")
    if os.path.isfile(script_path):
        with open(script_path, "r") as file:
            script_content = file.read()
            if check_for_exec(script_content):
                exec(script_content)
            else:
                raise Exception("Script contains unsafe code and will not be executed.")
    else:
        raise FileNotFoundError("Expected script not found.")