Lightning Talk: Enabling “Safe” Use of Untrusted Open Source Dependencies with Sandboxing
summary
Claims a novel tool, Packj sandbox, blocks install-time malware by creating an isolated filesystem layer and network firewall while remaining compatible with native extensions and without root. It uses ptrace-based syscall interposition to rewrite syscall arguments and enforce copy-on-write file changes, logs contacted URLs and spawned processes, and lets users review and commit or discard modifications. A GitHub Action enables CI auditing and sandboxed installs; the uploader reports ~93.9% of malicious npm packages use install scripts, motivating this approach.
AI-written summary · about
related talks
20mWhat If Npm Install Could Say No? Real-Time Defense Against Malicious Packages
38mSandboxing in Linux with zero lines of code
47mSecure Sandboxing in a Post-Spectre World
37mSandboxing Applications with Landlock
01h 25mSandboxing a Linux Application
33mOpen & Secure: Novel Sandboxing Technique for Any Open Source Library
32mLinux Sandboxing with Landlock
30mSandboxing Agentic AI With LSM-BPF