On: Two malicious Python libraries caught stealing SSH...

[Kalium]

It sounds like you're describing snap packages. Is that accurate?

That mostly works for whole applications. I'm not sure how to apply it to libraries for developers though. Especially ones that would get installed in userspace, like these python packages.

[staticassertion → Kalium]

I'm not super familiar with snap, my weak understanding is that it makes for a very poor isolation boundary.

[Kalium → staticassertion]

Yup, in large part because users expect things to work across the boundary.