Hacker GitHub

← All repos

phylum-dev/birdcage

View on GitHub ↗ ★ 218 Rust archived

Cross-platform embeddable sandboxing

15 mentions on Hacker News by 2 people: 0 stories, 15 comments · first 2022-11-02 · latest 2025-01-31

Mentions per year 15 mentions · busiest year 2023 (7)
20082026
AllStoriesComments NewestTopOldest
  1. https://github.com/phylum-dev/birdcage https://github.com/servo/gaol and several others ?
    comment by illegalmemory · 2025-01-31 · in Developers should embrace creative coding again
  2. …or others we've uncovered! 1. https://blog.phylum.io/typosquatting-campaign-targets-python... 2. https://github.com/phylum-dev/birdcage
    comment by louislang · 2024-03-28 · in PyPI halted new users and projects while it fended off supply-chain attack
  3. …in the sandbox. You can specify what the sandbox is allowed to touch in a TOML file. See: https://github.com/phylum-dev/birdcage
    comment by louislang · 2024-03-28 · in PyPI Suspends New User and Project Creation in Wake of Malware Campaign
  4. …3. https://blog.phylum.io/rust-malware-staged-on-crates-io/ 4. https://github.com/phylum-dev/birdcage 5. https://github.com/phylum-dev/cli 6. https://docs.phylum.io/docs/integrations_overview
    comment by louislang · 2023-12-14 · in Ledger's NPM account has been hacked
  5. …Knife was one of the first I came across, and it's been a consistent stream of papers since. 1. https://github.com/phylum-dev/birdcage 2. https://github.com/phylum-dev/cli
    comment by louislang · 2023-09-09 · in A study of malicious code in PyPI ecosystem
  6. …3. https://blog.phylum.io/npm-emails-validator-package-malware/ 4. https://github.com/phylum-dev/birdcage 5. https://github.com/phylum-dev/cli
    comment by louislang · 2023-09-01 · in Cryptocurrency Miner Masquerading as GCC Compiler Found in NPM Package
  7. We're actively working on this with our sandbox ( https://github.com/phylum-dev/birdcage ). We've wrapped the likes of pip, yarn, and npm already and are making moves to similarly provide support for cargo. Currently comes as part of the…
    comment by louislang · 2023-08-25 · in Rust Malware Staged on Crates.io
  8. …tps://blog.phylum.io/junes-sophisticated-npm-attack-attrib... 2. https://github.com/phylum-dev/cli 3. https://github.com/phylum-dev/birdcage
    comment by louislang · 2023-08-25 · in Rust Malware Staged on Crates.io
  9. We ( https://phylum.io ) actually open sourced our sandbox for this exact purpose. https://github.com/phylum-dev/birdcage It's baked into our CLI and supports limiting access to network, disk, etc. during package installation. For example,…
    comment by louislang · 2023-07-25 · in Social engineering campaign targeting tech employees spreads through NPM malware
  10. …Happy to chat further about this sort of thing, it’s something I’m wildly interested in! [1] https://github.com/phylum-dev/birdcage
    comment by louislang · 2023-01-15 · in Supply Chain Attack Using PyPI Packages “Colorslib”, “Httpslib”, and “Libhttps”
  11. …open source sandbox that limits access to the filesystem, network, disk and environment variables. https://github.com/phylum-dev/birdcage This is rolled into our CLI so that you can do things like `phylum npm install <pkgName>` and install…
    comment by louislang · 2022-12-09 · in Ransomware Python Packages Currently Being Published to PyPI
  12. Working on it! https://github.com/phylum-dev/birdcage Allows you to specify the allowed permissions in a toml file. Still a wip, but would love some feedback!
    comment by louislang · 2022-11-07 · in Malicious Python packages replace crypto addresses in developer clipboards
  13. …for primetime, but it is completely open source and we'd love some early feedback/contributions! https://github.com/phylum-dev/birdcage If anyone has any questions, I'd be more than happy to answer them!
    comment by louislang · 2022-11-07 · in Malicious Python packages replace crypto addresses in developer clipboards
  14. …into other projects. 1. https://github.com/phylum-dev/cli/blob/main/extensions/npm/P... 2. https://github.com/phylum-dev/birdcage
    comment by louislang · 2022-11-02 · in Dozens of malicious PyPI packages discovered targeting developers
  15. …part of our core CLI [1], but is totally open source [2]: [1] https://github.com/phylum-dev/cli [2] https://github.com/phylum-dev/birdcage
    comment by louislang · 2022-11-02 · in Dozens of malicious PyPI packages discovered targeting developers