Fetching from the wire…
Public story · 2026-08-03 · high
Libraries like Remix and hono replace globals such as Request and Blob, which crashed E2B's old instanceof checks.
Why now: E2B shipped the fix in the 2.37.0 release on July 31, the same release that added Fedora, Alpine and Arch sandbox support.
E2B shipped 2.37.0 on July 31, fixing a bug that made sandbox uploads silently store the string "[object Blob]" instead of the file itself.
The two failure modes weren't equal. A bad Request crashed loudly with "Failed to parse URL from [object Request]," an error you'd catch in minutes. A bad Blob didn't crash at all. It just wrote the wrong bytes and let the upload finish, the kind of failure that clears code review and shows up as a support ticket weeks later.
The cause: the old code used instanceof to detect Request, Blob and ReadableStream objects, which breaks the moment a library installs its own version of those globals.
@hono/node-server ships its own Request. Remix's installGlobals() swaps in Request, Blob and File. web-streams-polyfill replaces ReadableStream. Any of those in a user's stack and the checks stopped matching.
The fix checks object shape instead of instanceof, so a Request or Blob built by any of those libraries gets recognized correctly, per the changelog. The same release adds sandbox images for Fedora, Alpine and Arch Linux.
What makes the instanceof bug worth flagging is that it looks correct in review. It's standard JavaScript, it works in every test that doesn't happen to import Remix or hono. It only breaks in front of a real user's dependency tree, and when it breaks, it doesn't tell you. Worth grepping your own upload code for "instanceof Blob" before someone else finds it.
Each link below shares sources, entities, or timing with this story.
elie222/rakazo appeared Aug 13, Apache-2.0, TypeScript, explicitly bring-your-own model and sandbox (tested against Docker, E2B, Daytona) with the Pi runtime underneath and OpenRouter, Codex, Copilot, or SuperGrok device-code sign-in instead of a mandatory API key. Each bot ge...
Firecracker + CoW mmap forking spawns KVM-isolated sandboxes in 0.79ms p50 with 265KB memory per instance — versus E2B's ~150ms and ~128MB. At this scale, sandboxed code execution becomes viable inside interactive agent loops where latency directly impacts UX. GitHub ---
In roughly eight weeks: omnigent-ai/omnigent (8,418 stars), vercel/eve (4,492), clawkwork/clawk (951, "give coding agents a disposable Linux VM, not your laptop"), tastyeffectco/sandboxd (885), BitMiracle-AI/Dormice (557, pitching "the SQLite of agent sandboxes," self-hosted,...
Docker's formal entry into agent infrastructure isn't just another tool launch — it's a platform-level event that could reshape how agents are packaged and deployed. Docker Engineering released docker-agent, an official AI Agent Builder and Runtime written in Go, reaching 2,46...
Apache-2.0, rootless, single static binary, no daemon, claiming about 3.5ms container start against Docker's roughly 297ms and zero resident memory when idle (GitHub). It reads OCI images and docker-compose files but deliberately skips Docker's API, overlay networks and Swarm,...
mudler/vllm.cpp mirrors vLLM's V1 / Model Runner V2 architecture in pure C++ with no Python, PyTorch, or ggml at runtime, shipping a shared/static libvllm with a stable 17-symbol C ABI, an example CLI, and an OpenAI-compatible server. Install footprint 66 MiB against vLLM's 9....
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.