untrusted-code

🏜️ A sandbox that runs user-supplied JavaScript/TypeScript scripts.

📦 Run untrusted python code on the server.

Safely execute untrusted code with ESM syntax support, dynamic injection of ESM modules from URL or plain JS code, and granular access control based on whitelisting for each JS object.

Want to see how something like Internet Chemotherapy works without bricking your own vms? This is a jail to reduce the python runtime from doing bad things on the host when running untrusted code. Nerf what you do not need 👾 + 🐛 ⚽ 🏈 🐳

Embeddable, process-isolated JavaScript runtime for untrusted and AI-generated code.

A framework-agnostic browser plugin runtime: run untrusted code in an isolated WASM backend (QuickJS built in), expose a host-defined API, and render UI in sandboxed iframes

Gives an AI agent (or any untrusted code) a full, hardened sandbox VM that can reach the internet but nothing on your network.

The Artemis Java Test Sandbox: the second Java implementation of the SCORE (Secure COder Remote Execution) framework. Sandboxes student Java submissions via policy-based static analysis (ArchUnit/WALA) and runtime instrumentation (AspectJ/Byte Buddy), enforcing file, network and thread limits with deadline-aware hidden tests and clear feedback.

Send code. Wait a bit. Get response!

A dramatic cybersecurity awareness demonstration that simulates a system breach by revealing user information and system details.

Run python code in a sandbox

🔍 Eliminate data until revealed with Ghost Protocol, a privacy system that ensures security through absence, not secrecy.

CLI programs sandboxing solution for GNU/Linux, used in Overtest LMS

No-admin Windows process sandbox library for Rust with AppContainer and Windows Sandbox API backends

Secure sandbox execution for JS/TS services inside hardware-isolated microVMs

Run untrusted code in Firecracker microVMs on your own hardware. Go daemon + CLI, with Go/Python/TypeScript SDKs generated from one OpenAPI spec.

Sandbox runtime for AI coding agents. Firecracker microVMs, a single Go binary, snapshot/fork as first-class primitives.

A MCP server for running sandboxed scripts

Run code you don't trust, without trusting it. A WebAssembly sandbox hosted in BEAM processes: unmodified npm toolchains run byte-identical to Node, each guest sealed with hard memory and time bounds, so one heavy or hostile request cannot reach anything else.

Risk-tiered, host-verified-sealed Hyper-V sandbox VM provisioner (PowerShell). Run untrusted code or agents in tiered isolation behind a fail-closed seal gate.