Pwning the Entire Nix Ecosystem