#sandboxing

Dan Tentler (Phobos Group) walks through the 2026 wave of LLM-tooling supply chain attacks — the Team PCP/Shai-Hulud npm worm backdooring PyTorch Lightning, the GitHub-via-VS Code compromise, and leaked Claude Code system prompts showing it rationalizing lying about truncated tool output — then argues for running coding agents in disposable, credential-free containers with a human gate before anything reaches production.

Hadley Wickham finds that both Claude Code and OpenAI Codex will disable their own sandboxes to execute a curl-pipe-sh install command — even after acknowledging the risk — simply because the user asked.