Shon

21 |Web3 & AI🤿|Arranging 0s and 1s in just the right order.🛠️

[Shon @0xShon]

Ab dekho toh hum paas lekin
Socho kitni doori hai

[Shon @0xShon]

@sync_ise Notepad++

[Shon @0xShon]

The more you fuck around the more you find out.

[Shushant Lakhyani @shushant_l]

An underrated life hack:

Let everyone around you think that they are smarter than you

[DIVINE @VivianDivine]

Way sicker than your average!

[Dan Go @CoachDanGo]

Take care of your appearance. Lift the weights. Eat healthy foods. Sleep like an athlete. Dress like you care. Fix your posture. Moisturize your face. Take care of your skin. Your looks are your business card. Make it look like you care about yourself.

[Elon Musk @elonmusk]

@beffjezos I never give up. Never.

[Marc Andreessen 🇺🇸 @pmarca]

Do you want to be liked, or do you want to win?

[Prof. Feynman @ProfFeynman]

Life is too short to worry about little things. Have fun. Fall in love. Regret nothing, and don't let people bring you down. Study, think, create, and grow. Teach yourself and teach others.

[Arun @hiarun02]

The real danger of AI isn’t job loss.

It’s losing the habit of thinking.

[Shon @0xShon]

@_Creation22 Math is not mathing

[Shon @0xShon]

Take a skill only 2M people could do. Build for the 260M who couldn't.

That's how the most successful products in Silicon Valley are being built right now.

Canva did it with design. Harvey did it with law. Vibe coding tools did it with engineering.

[Shon @0xShon]

@bidhanxcode Bob the builders

[Naval @naval]

The quality of your mind is the quality of your life.

[Shon @0xShon]

Someone published an npm package called everything that depends on every public npm package. Then tried to delete it. npm said no. Trapped by his own prank 💀
https://t.co/Efsdal2Dnq
https://t.co/cW8Belhx6o
https://t.co/lNj7cwQib8

[Feross @feross]

🤨 People keep asking how to protect yourself.

#1: set min-release-age=7 in .npmrc

#2: install Socket for GitHub (it's free!) to protect PRs from bad dependencies: https://t.co/D9bsRJj65R

#3: install Socket Firewall (also free!) to protect your laptop: https://t.co/u1NRD57PQ8

[Archie Sengupta @archiexzzz]

very big breach

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Shon @0xShon]

Anthropic is now officially more open than OpenAI.

[Chaofan Shou @Fried_rice]

Claude code source code has been leaked via a map file in their npm registry!

Code: https://t.co/jBiMoOzt8G

[Wise @trikcode]

the generation that refused to accept cookies.

is now giving AI access to their desktops, files, and bank accounts.