untrusted-code

🏜️ A sandbox that runs user-supplied JavaScript/TypeScript scripts.

📦 Run untrusted python code on the server.

Safely execute untrusted code with ESM syntax support, dynamic injection of ESM modules from URL or plain JS code, and granular access control based on whitelisting for each JS object.

Want to see how something like Internet Chemotherapy works without bricking your own vms? This is a jail to reduce the python runtime from doing bad things on the host when running untrusted code. Nerf what you do not need 👾 + 🐛 ⚽ 🏈 🐳

Embeddable, process-isolated JavaScript runtime for untrusted and AI-generated code.

A framework-agnostic browser plugin runtime: run untrusted code in an isolated WASM backend (QuickJS built in), expose a host-defined API, and render UI in sandboxed iframes

Gives an AI agent (or any untrusted code) a full, hardened sandbox VM that can reach the internet but nothing on your network.

The Artemis Java Test Sandbox: the second Java implementation of the SCORE (Secure COder Remote Execution) framework. Sandboxes student submissions via policy-based static analysis (ArchUnit/WALA) and runtime instrumentation (AspectJ/Byte Buddy) over file, network, command, thread and JVM access, with deadline-aware hidden tests and clear feedback.

Send code. Wait a bit. Get response!

A dramatic cybersecurity awareness demonstration that simulates a system breach by revealing user information and system details.

🔍 Eliminate data until revealed with Ghost Protocol, a privacy system that ensures security through absence, not secrecy.

Run python code in a sandbox

Secure sandbox execution for JS/TS services inside hardware-isolated microVMs

No-admin Windows process sandbox library for Rust with AppContainer and Windows Sandbox API backends

CLI programs sandboxing solution for GNU/Linux, used in Overtest LMS

Sandbox for running untrusted JavaScript in the browser.

Sandbox runtime for AI coding agents. Firecracker microVMs, a single Go binary, snapshot/fork as first-class primitives.

Run untrusted code in Firecracker microVMs on your own hardware. Go daemon + CLI, with Go/Python/TypeScript SDKs generated from one OpenAPI spec.

A MCP server for running sandboxed scripts

Run code you don't trust, without trusting it. A WebAssembly sandbox hosted in BEAM processes: unmodified npm toolchains run byte-identical to Node, each guest sealed with hard memory and time bounds, so one heavy or hostile request cannot reach anything else.