Yeah, isn’t that Claude Codes sandbox? That drops and every npm install it taking over the world, lol.

No, it is sandboxed by Bubblewrap on Linux and Seatbelt on Mac