Defend Against Data-as-Instructions in Toolchains