Post

Given today's LiteLLM supply chain attack, what are people's preferred development environment sandboxes on MacOS these days? I think it's time I started running my development environments somewhere where rogue code can't steal all my ~/... credential files

Justin Cormack

@justincormack.bsky.social

24 Mar

reducing/eliminating credential files is also good. Secretive for ssh keys, ephemeral credentials via oauth where you can etc, scripts to generate credentials and rotate them.

Ant Stanley

@iamstan.dev

I'm spinning up spot instances on AWS whenever I need an LLM to write code... plan locally with limited permissions, then off to a spot instance to build.. provision temp/ephemeral credentials where possible. Bonus is Claude Code runs a lot faster, with significantly less waiting on network IO

24/3/26, 9:11 pm0 reposts3 likes

Chris Swan

@cpswan.net

25 Mar

You're not alone addxorrol.blogspot.com/2026/03/slig...

addxorrol.blogspot.comSlightly safer vibecoding by adopting old hacker habitsI have seen a lot of public discussion around supply-chain attacks on the Python ecosystem, prompt injection risks when using coding agents,...