diff --git a/main.go b/main.go
index 1d2ce03..5e9f950 100644
--- a/main.go
+++ b/main.go
@@ -355,10 +355,10 @@ func transformCompile(args []string) ([]string, error) {
 // To allow using garble without GOPRIVATE for standalone main packages, it will
 // default to not matching standard library packages.
 func isPrivate(pkgPath string) bool {
-	if pkgPath == "main" {
-		// TODO: why don't we see the full package path for main packages?
-		// Hint: it seems like the real import path is at the top of
-		// -importcfg.
+	if pkgPath == "main" || strings.HasPrefix(pkgPath, "plugin/unnamed") {
+		// TODO: why don't we see the full package path for main
+		// packages? The linker has it at the top of -importcfg, but not
+		// the compiler.
 		return true
 	}
 	return GlobsMatchPath(envGoPrivate, pkgPath)
diff --git a/testdata/scripts/plugin.txt b/testdata/scripts/plugin.txt
index 4bf782d..9271f48 100644
--- a/testdata/scripts/plugin.txt
+++ b/testdata/scripts/plugin.txt
@@ -13,6 +13,10 @@ binsubstr main$exe 'PublicVar' 'PublicFunc'
 
 [short] stop # no need to verify this with -short
 
+# This used to fail, since in this case the package path for the ad-hoc plugin
+# package isn't "main", but "plugin/unnamed-*".
+garble build -buildmode=plugin plugin/main.go
+
 go build -buildmode=plugin ./plugin
 binsubstr plugin.so 'PublicVar' 'PublicFunc' 'privateFunc'
 go build
@@ -24,11 +28,17 @@ module test/main
 -- plugin/main.go --
 package main
 
-var PublicVar int
+import "test/main/plugin/lib"
+
+var PublicVar int = lib.ImportedFunc()
 
 func privateFunc(n int) { println("Hello, number", n) }
 
 func PublicFunc() { privateFunc(PublicVar) }
+-- plugin/lib/lib.go --
+package lib
+
+func ImportedFunc() int { return 4 }
 -- main.go --
 package main