Post

Given today's LiteLLM supply chain attack, what are people's preferred development environment sandboxes on MacOS these days? I think it's time I started running my development environments somewhere where rogue code can't steal all my ~/... credential files

reducing/eliminating credential files is also good. Secretive for ssh keys, ephemeral credentials via oauth where you can etc, scripts to generate credentials and rotate them.

I'm spinning up spot instances on AWS whenever I need an LLM to write code... plan locally with limited permissions, then off to a spot instance to build.. provision temp/ephemeral credentials where possible. Bonus is Claude Code runs a lot faster, with significantly less waiting on network IO

You're not alone addxorrol.blogspot.com/2026/03/slig...