@JournalDuGeek Le réservoir de détergent est une évolution logique mais simple, du souci de déformation du joint en silicone qui fait fuir le bac d'eau propre, dû a l'usage de détergent, même ceux recommandés et/ou annoncés compatibles.
One week ago, I asked claude that I want to schedule an AI watch digest routine and it tell me use github actions... Excitée tobtry routines tomorrow 🤗
@LMDPSG Restez humbles messieurs, si nous, supporters parisiens, avons appris une chose durant des années (de galères et de combats ❤️💙), c'est bien de savoir rester humble, respecter l'adversaire et le football... Allez Paris 🔥
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.
This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.
Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:
• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence
If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.