Record · corpus.blog/posts/01a0da1f-2ec5-7160-9bd9-9c502beb922c

Package Manager Sandboxing

Andrew Nesbitt | Software Engineer and Package Management Nerd · published 24 September 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at nesbitt.io Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 102
Words captured: 2,773

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

7.0.0 Read at the source ↗

brew.sh

https://github.com/Homebrew/brew/security/advisories/GHSA-5263-whxq-77hp

github.com

https://github.com/Homebrew/brew/commit/2f529220e7

github.com

6.0.0 Read at the source ↗

brew.sh

https://github.com/Homebrew/brew/pull/23255

github.com

https://github.com/Homebrew/brew/pull/23425

github.com

https://github.com/Homebrew/brew/pull/24038

github.com

https://github.com/Homebrew/brew/pull/24018

github.com

https://www.anthropic.com/engineering/claude-code-sandboxing

anthropic.com

https://github.com/anthropics/sandbox-runtime

github.com

https://developers.openai.com/codex/agent-approvals-security

developers.openai.com

Building a safe, effective sandbox to enable Codex on Windows Read at the source ↗

openai.com

https://cursor.com/blog/agent-sandboxing

cursor.com

https://google-gemini.github.io/gemini-cli/docs/cli/sandbox.html

google-gemini.github.io

How we contain Claude across products Read at the source ↗

anthropic.com

"Shai-Hulud" Worm Compromises npm Ecosystem in Supply Chain Attack (Updated November 26) Read at the source ↗

unit42.paloaltonetworks.com

https://labs.cloudsecurityalliance.org/research/csa-research-note-shai-hulud-npm-worm-ai-developer-supply-ch/

labs.cloudsecurityalliance.org

https://nx.dev/blog/s1ngularity-postmortem

nx.dev

https://thehackernews.com/2026/09/attacker-hijacks-ai-coding-assistant.html

thehackernews.com

https://github.com/Homebrew/brew/pull/22696

github.com

https://github.com/Homebrew/brew/pull/22793

github.com

https://github.com/pnpm/pnpm/issues/13772

github.com

https://github.com/denoland/deno/issues/35714

github.com

https://opam.ocaml.org/doc/FAQ.html

opam.ocaml.org

https://github.com/ocaml/opam/blob/master/src/state/shellscripts/bwrap.sh

github.com

https://github.com/ocaml/opam/blob/master/src/state/shellscripts/sandbox_exec.sh

github.com

https://github.com/ocaml/opam/issues/3505

github.com

https://github.com/ocaml/opam/issues/7140

github.com

https://github.com/swiftlang/swift-package-manager/blob/main/Sources/Basics/Sandbox.swift

github.com

https://github.com/swiftlang/swift-evolution/blob/main/proposals/0303-swiftpm-extensible-build-tools.md

github.com

https://github.com/swiftlang/swift-evolution/blob/main/proposals/0332-swiftpm-command-plugins.md

github.com

https://github.com/swiftlang/swift-package-manager/issues/6951

github.com

https://nix.dev/manual/nix/2.33/release-notes/rl-2.2

nix.dev

https://guix.gnu.org/manual/en/html_node/Build-Environment-Setup.html

guix.gnu.org

https://github.com/NixOS/nix/security/advisories/GHSA-wf4c-57rh-9pjg

github.com

https://guix.gnu.org/en/blog/2025/privilege-escalation-vulnerabilities-2025/

guix.gnu.org

https://bazel.build/docs/sandboxing

bazel.build

https://github.com/gentoo/sandbox

github.com

https://wiki.gentoo.org/wiki/FEATURES

wiki.gentoo.org

https://github.com/Debian/apt/blob/main/debian/NEWS

github.com

https://wiki.debian.org/UntrustedDebs

wiki.debian.org

https://linuxiac.com/pacman-7-0-package-manager-released/

linuxiac.com

https://gitlab.archlinux.org/pacman/pacman/-/blob/master/NEWS

gitlab.archlinux.org

https://github.com/alpinelinux/abuild/blob/master/abuild.in

github.com

https://mise.jdx.dev/sandboxing.html

mise.jdx.dev

https://man7.org/linux/man-pages/man8/rpm-plugin-unshare.8.html

man7.org

https://github.com/CocoaPods/CocoaPods/wiki/Sandbox

github.com

https://github.com/CocoaPods/CocoaPods/issues/2848

github.com

https://docs.deno.com/runtime/fundamentals/security/

docs.deno.com

https://github.com/denoland/deno/security/advisories/GHSA-8xpq-cjcf-3wh9

github.com

Shai-Hulud 2.0: Inside The Second Coming, the Most Aggressive NPM Supply Chain Attack of 2025 Read at the source ↗

blog.checkpoint.com

https://github.com/pnpm/pnpm/releases/tag/v10.0.0

github.com

https://bun.com/blog/release-notes/bun-v0.6.10

bun.com

https://github.com/yarnpkg/berry/pull/7089

github.com

https://github.com/npm/cli/releases/tag/v12.0.0

github.com

https://github.com/pnpm/pnpm/releases/tag/v11.0.0

github.com

https://github.com/yarnpkg/berry/pull/7135

github.com

Deno 2.9 Read at the source ↗

deno.com

https://github.com/npm/rfcs/pull/488

github.com

https://github.com/npm/rfcs/pull/868

github.com

https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/

github.blog

https://github.com/ruby/rubygems/issues/9138

github.com

https://github.com/spack/spack/issues/52327

github.com

https://github.com/spack/spack/issues/5764

github.com

https://gitlab.archlinux.org/pacman/pacman/-/merge_requests/368

gitlab.archlinux.org

https://github.com/CachyOS/pacman/commit/4056cd687f6379e61e7decb9b66e9b57cb3949a9

github.com

https://github.com/rust-lang/cargo/issues/5720

github.com

https://github.com/dtolnay/watt

github.com

https://github.com/cackle-rs/cackle

github.com

https://internals.rust-lang.org/t/pre-rfc-sandboxed-deterministic-reproducible-efficient-wasm-compilation-of-proc-macros/19359

internals.rust-lang.org

https://rust-lang.github.io/rust-project-goals/2024h2/sandboxed-build-script.html

rust-lang.github.io

Supply chain attack on arrayref Read at the source ↗

blog.rust-lang.org

https://www.wiz.io/blog/rust-supply-chain-attack-on-arrayref-significant-overlap-with-dprk-campaigns

wiz.io

https://github.com/rust-lang/cargo/issues/13681

github.com

https://github.com/ziglang/zig/issues/14286

github.com

https://github.com/pypa/pip/issues/4427

github.com

https://github.com/pypa/pip/issues/11034

github.com

https://github.com/pypa/pip/issues/13869

github.com

https://github.com/python-poetry/poetry/issues/9254

github.com

https://github.com/astral-sh/uv/blob/main/agents/references/threat-model.md

github.com

https://pixi.prefix.dev/latest/security/

pixi.prefix.dev

https://github.com/gradle/gradle/issues/9210

github.com

https://openjdk.org/jeps/486

openjdk.org

https://github.com/NuGet/Home/issues/10262

github.com

https://docs.conan.io/2/security/guidelines.html

docs.conan.io

https://learn.microsoft.com/en-us/vcpkg/concepts/ports

learn.microsoft.com

https://learn.microsoft.com/en-us/nuget/consume-packages/migrate-packages-config-to-package-reference

learn.microsoft.com

https://www.reversinglabs.com/blog/iamreboot-malicious-nuget-packages-exploit-msbuild-loophole

reversinglabs.com

https://getcomposer.org/doc/articles/scripts.md

getcomposer.org

https://julialang.org/blog/2019/11/artifacts/

julialang.org

https://blogs.perl.org/users/shoichi_kaji1/2017/03/make-your-cpan-module-static-installable.html

blogs.perl.org

https://github.com/haskellfoundation/tech-proposals/blob/main/rfc/060-replacing-cabal-custom-build.md

github.com

https://fedoraproject.org/wiki/Changes/RPMSuportForSystemdSysusers

fedoraproject.org

https://devblog.archlinux.page/2026/on-scripts-and-hooks/

devblog.archlinux.page

https://dart.dev/tools/hooks

dart.dev

https://docs.kernel.org/userspace-api/landlock.html

docs.kernel.org

https://keith.github.io/xcode-man-pages/sandbox_init.3.html

keith.github.io

https://github.com/apple/containerization/issues/737

github.com

https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners

docs.github.com

https://docs.github.com/en/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization

docs.github.com

https://github.com/step-security/harden-runner

github.com

https://github.com/ocaml/opam/issues/4089

github.com