Tried running the compromised package inside Greywall, because theoretically it should mitigate everything but in practice it just forkbombs itself?