[Sephr]

Through bad antivirus code that inadvertently runs your code in a sandbox. There have been multiple vulnerabilities like this recently.

[tedunangst]

Sounds like we should design our package managers so that they don't run hostile code in a sandbox.