diff --git a/hosts/Rhizome/programs.nix b/hosts/Rhizome/programs.nix
index dbbda58..f61f051 100644
--- a/hosts/Rhizome/programs.nix
+++ b/hosts/Rhizome/programs.nix
@@ -14,13 +14,13 @@
     mochi
     slack
     the-unarchiver
+    wblock
     zoom-us
   ];
 
   homebrew = {
     enable = true;
     casks = [
-      "adguard"
       "boltai"
       "dash"
       "legcord"
diff --git a/overlays/custom-packages.nix b/overlays/custom-packages.nix
index c869484..10be28c 100644
--- a/overlays/custom-packages.nix
+++ b/overlays/custom-packages.nix
@@ -21,4 +21,7 @@ self: super: {
 
   # Ungoogled Chromium with privacy enhancements
   ungoogled-chromium = super.callPackage ./../packages/ungoogled-chromium/package.nix {};
+
+  # wBlock Safari extension
+  wblock = super.callPackage ./../packages/wblock/package.nix {};
 }
diff --git a/packages/wblock/package.nix b/packages/wblock/package.nix
new file mode 100644
index 0000000..e6668e6
--- /dev/null
+++ b/packages/wblock/package.nix
@@ -0,0 +1,38 @@
+# TODO: Build from source and upstream
+{
+  lib,
+  stdenvNoCC,
+  fetchurl,
+  _7zz,
+}:
+stdenvNoCC.mkDerivation (finalAttrs: {
+  pname = "wblock";
+  version = "2.0.0";
+
+  src = fetchurl {
+    url = "https://github.com/0xCUB3/wBlock/releases/download/${finalAttrs.version}/wBlock.dmg";
+    hash = "sha256-emcEURH/G6Laph4/P4vGJ+Ht6QvOjijrDh1qgstGMVo=";
+  };
+
+  # Use 7zz to work around APFS: https://discourse.nixos.org/t/help-with-error-only-hfs-file-systems-are-supported-on-ventura/25873/9
+  nativeBuildInputs = [_7zz];
+
+  sourceRoot = ".";
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p "$out/Applications"
+    cp -r *.app "$out/Applications"
+
+    runHook postInstall
+  '';
+
+  meta = with lib; {
+    description = "Next-generation ad blocker for Safari";
+    homepage = "https://github.com/0xCUB3/wBlock";
+    license = lib.licenses.gpl3Only;
+    platforms = platforms.darwin;
+    sourceProvenance = with sourceTypes; [binaryNativeCode];
+  };
+})