Pwning the Nix ecosystem