Emmanuel Kasper: Moving software development to separate VM to reduce credential scavenging

Rationale: I was remembered via https://unit42.paloaltonetworks.com/chaindrop-npm-worm-analysis/ (linked from https://anarc.at/blog/2026-08-18-people-vs-ai-overlords/) of the risk of downloading untrusted packages in a dev environment. If you read the blog post above you will see that it is way to easy do have a random npm, or even python package in a dev environment scavenge your long running credentials from your workstation, either on disk, or reading from memory ! I will thus move to the following set up: things running directly in my workstation…

Quelle: Originalartikel öffnen