The interpreter we forgot to sandboxHundreds of malicious package versions across three ecosystems, and the uncomfortable fact that installing one runs arbitrary code.
