The attack didn't start with code. It started with a collaboration email.
The maintainer of one of the most widely used HTTP libraries in JavaScript, the de facto standard, got a note from what looked like a legitimate company. They invited him to a Slack channel. For nearly a month they worked with him: real conversations, real ideas, real help for his project. Then a Microsoft Teams call cut out mid-meeting and a prompt appeared saying Teams was out of date, click this file to update. The file was malware.
Several of us at Socket received the same lure. I can't take credit for not falling for it. I never saw the email. One of the best phishing defenses, it turns out, is being too busy to read your inbox. Not a strategy I would recommend. :)
This is what supply chain attacks look like now: patient, targeted, and aimed at the human rather than the code. Compromise one maintainer and you reach every application that depends on the library, increasingly including the AI agents and coding tools that pull it in by default.
You can't train your way out of a month-long social engineering campaign. You have to assume compromise will happen and catch malicious code at the moment it enters your dependencies. That's what we're building at Socket.
From my conversation with Anne Dwane on the Village Global podcast.
We’ve been hearing from many of you about how the lack of signings is affecting your mental health. It’s important to remember that while transfers can stir up excitement, they’re not worth sacrificing your well-being or your family time.
Players come and go, but your health is what truly matters.
Take a step back. Prioritize your mental health. Spend time with your loved ones, engage in activities that bring you joy, and remember that transfers is just news. The highs and lows will always be there, but your peace of mind should come first. Focus on what really counts which is your happiness and the people around you.
That half-time show can f*ck right off. I never want to see that crap at another football game again.
Average viewers for American sports biggest matches:
🏈 NFL Super Bowl: 130 million
🏀 NBA Finals : 20 million
⚾️ MLB World Series : 20 million
Now let’s look at football:
⚽️ Champions League Final: 350 million
⚽️ World Cup Final: 1.6 BILLION
We don’t want half time shows, we don’t want the over-commercialisation of the sport. We don’t want football “Americanised.” It’s not needed.
Football is the BIGGEST sport in the world.
Why? Because it is for the people. It’s authentic. The show is the sport itself.
🚨🇫🇷 Kylian Mbappé: “Disrespecting the shirt in the first half? I would say we were simply being human… and unfortunately, we cannot afford to be human”.
“I think we were completely switched off, and they certainly gave us a wake-up call”.
@traversymedia It seems to me that, at least claude, is not necessarily loading AGENTS.md if you have its reference in CLAUDE.md, like in your example.
I wrote Deep Learning with Python to be the definitive guide to how deep learning works and how to best make use of it. Tens of thousands of people got their career start via this book. 120,000 copies sold, and downloaded by millions more.
And now it's free to read online: https://t.co/3CbcQ7hmjp
📱New React Native Crash Course for 2026
We build a macro & calorie counting app from scratch using @expo. I included a full written walkthrough with all commands and code samples in the repo as well.
https://t.co/58ZdkZDQKw
I personally think it is time Liverpool looked for a new manager but I also respect what Arne Slot has achieved. Personal attacks on the man as an individual is an absolute disgrace and goes against everything YNWA stands for.
Yes, he has made decisions I don't agree with and at times they make me angry but so called Liverpool fans having a go at the man as a person is absolutely out of order.
I think it is time he now moves on because he cannot get the best out of the team and I don't think he can regain that belief from his players. They look disinterested and lacklustre, which is also a sad indictment on the players also.
But respect what Arne Slot has achieved, wish him well (if you do want him to move on) but be respectful. That's my view anyways.