
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@grayhaven/sandcastle
Advanced tools
TypeScript SDK for the SandCastle sandbox runtime — lightweight WASM-based sandboxes for AI agent code execution.
bun add @grayhaven/sandcastle
# or
npm install @grayhaven/sandcastle
import { SandCastle } from "@grayhaven/sandcastle";
const sc = new SandCastle();
const result = await sc.run<number>("return 1 + 1;");
// result === 2
const result = await sc.run<string>(
'const i = globalThis.__sandcastle_input; return "Hello " + i.name;',
{ name: "World" }
);
// result === "Hello World"
import { createCodeTool, TwoPassExecutor } from "@grayhaven/sandcastle/codemode";
const executor = new TwoPassExecutor();
const tool = createCodeTool({ tools: [...yourTools], executor });
// Give this single tool to your LLM instead of N separate tools
Feed these to your LLM so it knows the sandbox API:
import type {} from "@grayhaven/sandcastle/guest";
The sandcastle CLI must be installed and in your PATH. See the main repo for installation instructions.
Apache-2.0
FAQs
The fastest way to run untrusted JavaScript safely. Zero-config, Bun-first.
The npm package @grayhaven/sandcastle receives a total of 11 weekly downloads. As such, @grayhaven/sandcastle popularity was classified as not popular.
We found that @grayhaven/sandcastle demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.