Introducing ShipClip.
A native Mac screen recorder built specifically for Apple Silicon.
Record. Edit. Share a link. Know if they watched it.
Under 5MB download. No Electron bloat so we can export a 10 min video in 2 minutes.
https://t.co/udCMUQb3XB
๐จ UPDATE: Mini Shai-Hulud has crossed from @npmjs into @pypi and is still spreading.
Newly confirmed compromised artifacts:
@โopensearch-project/opensearch: 3.5.3, 3.6.2, 3.7.0, 3.8.0 (1.3M weekly downloads)
mistralai: 2.4.6 on PyPI
guardrails-ai: 0.10.1 on PyPI
additional @โsquawk/* packages on npm
guardrails-ai 0.10.1 executes malicious code on import. On Linux, it downloads git-tanstack[.]com/transformers.โpyz, writes it to /tmp/transformers.โpyz, and runs it with python3 without integrity verification.
The git-tanstack.โcom domain displayed a message signed โWith Love TeamPCP,โ along with: โWe've been online over 2 hours now stealing creds
Regardless I just came to say hello :^)โ
The page also linked to a YouTube video and you can probably guess which one.
Be careful running npm install
โBecause the payload runs as part of npm install's lifecycle, anyone who installed an affected version on 2026-05-11 must treat the install host as potentially compromised.โ
@AutisticOvrflow 650 is big if youโre not spending time on highways.
DRZ400 would be awesome. I hope you find one soon! I know youโve been looking for awhile