3 ms·
This only works for post-install script attacks. When the package is compromised, just running require somewhere in your code will be enough, and that runs with
by captn3m0 6mo ago
This only works for post-install script attacks. When the package is compromised, just running require somewhere in your code will be enough, and that runs with node/java/python and no bwrap.
- himata4113 6mo agonode is also sandboxed within bwrap I have sandbox -p node if I have to give node access to other folders, I also have sandbox -m to define custom mountpoints if necessary and UNSAFE=1 as a last resort which just runs unsandboxed.