Comment by abhisek

Building Package Manager Guard (PMG) - https://github.com/safedep/pmg

With all the supply chain attacks on OSS ecosystems targeting developers, PMG is a practical protection using a combination of threat intel, policy and sandbox.

It’s a package firewall on the terminal really. It has been surprisingly effective against most of the recent attacks.