JavaScript & TypeScript
Node.js 22, npm 12, npx, and Corepack support for project-managed Yarn and pnpm.
FREE PUBLIC BETA · macOS
Clone the repo.
Not the risk.
A normal-looking terminal that runs suspicious coding-interview projects inside a disposable, offline virtual machine, not on your Mac. Free to use, local by design, and no account required.
FreeNo account neededFully offline
Requires only macOS 14+ · No Docker or setup tools
nobody@termisec /workspace % git clone interview-project
Cloning into 'interview-project'...
We found malicious intent.
Do not clone this repo.
● Network offline · Host files unavailable
29deterministic checks ↗
0personal folders mounted
OFFnetwork by default
AI-freedesktop security engine
INTERVIEW-READY RUNTIME
The common stack.
Already inside.
Start the interview without configuring your Mac. TermiSec includes the languages and build tools most coding challenges expect, contained entirely inside its isolated environment.
Python
Python 3.14, pip 26, and virtual environments for isolated project dependencies.
Shell
Bash 5.3 and Zsh 5.9 for interview scripts, setup commands, and familiar terminal workflows.
C & C++
GCC and G++ 15 with Make 4.4 for compiled exercises and native package dependencies.
Git 2.54Node.js 22npm 12Python 3.14pip 26GCC 15Make 4.4Alpine Linux
Still guarded: downloads and dependency installs require approval, run with temporary network access, and are scanned before follow-up execution.
HOW IT WORKS · NATIVE BY DESIGN
Your workflow.
Behind an airlock.
Nothing new to learn. Use the terminal you already know while TermiSec handles isolation, scanning, and network control around it.
Clone normally
Use Git, npm, Python, and the shell you already understand. No repository upload or link scanner.
Run contained
The project sees one disposable workspace, not your home folder, keys, wallets, browser data, or Docker socket.
Stop before impact
Commands entered in TermiSec trigger a project scan before execution. High-risk findings pause with the file, line, rule, and reason.
WHAT IT CATCHES
The tricks hiding inside “just run npm install.”
29 deterministic checks shaped by analysis of the most common attack paths around coding-interview repositories shared through job boards.
Automatic execution
npm lifecycle hooks, VS Code/Cursor folder-open tasks, Xcode build scripts, Unity auto-load, Dev Containers, and executable Git hooks.
Paused before executionCredential exfiltration
Environment harvesting, SSH and cloud paths, wallets, browser profiles, system fingerprinting, and outbound delivery.
Command-and-control
Periodic beacons, raw-IP endpoints, remote responses passed into eval, encoded PowerShell, and obfuscated payloads.
Disguised payloads
Scripts or encrypted blobs masquerading as fonts, icons, images, generated bundles, and vendor artifacts.
Dependency risks
Install scripts, escaping local paths, raw-IP sources, direct Git dependencies, plus an advisory-backed npm audit.
THE BOUNDARY
Even missed malware wakes up with nothing to steal.
Static detection will never be perfect. TermiSec’s second layer is containment: unprivileged execution, read-only system files, dropped capabilities, resource limits, no Mac home directory, and no network unless the command genuinely needs it.
YOUR MAC private
›_ TERMISEC CONTAINER
/workspace
disposable project files
disposable project files
network: none
SSH keysBrowser dataWalletsCloud credentials
HONEST SECURITY
Strong boundary.
No magic claims.
TermiSec reduces the risk of running an untrusted repository. It does not prove that a project, recruiter, dependency, or person is trustworthy.
- Free public beta
- No account or sign-in required
- Runs locally inside a built-in disposable VM
- Deterministic rules; no AI monitoring
FREE · NO ACCOUNT REQUIRED · VERSION 1.0
Your next interview repo
doesn’t need your Mac password.
Download TermiSec for macOSRuns locally · Apple silicon · macOS 14+ · No Docker required