HASHRATE

Bullder - Bitcoin | Lightning | Bitcoin class of 2140

[HASHRATE @Hashratebtc]

@BesserBoerse @WatcherGuru @grok Not a startup anymore lol

[HASHRATE @Hashratebtc]

@oliarirafael @Clevert46042645 @FelipeTadewald E de clever não tem nada kkkk

[HASHRATE @Hashratebtc]

@MidyReyes @saylor No money for the taxi

[HASHRATE @Hashratebtc]

@mcmanocall @choqueibtc Dessa vez eu achei

[HASHRATE @Hashratebtc]

@narcelio @hi_disruptivas Calma marcelio

[HASHRATE @Hashratebtc]

@FelipeTadewald Se você tivesse estudado como funciona cripto ao invés de ficar só criticando não estaria falando essas asneiras kkkk

[HASHRATE @Hashratebtc]

@FelipeTadewald É facil basta olhar a liquidez e o volume de negociações liquidez do book

[HASHRATE @Hashratebtc]

@TrollFootball Lol

[HASHRATE @Hashratebtc]

@shiri_shh Só why can’t he just build 5 500 mil valuation companhias?

[HASHRATE @Hashratebtc]

@YohannHoff @0xCokinha @ourbit @kvttzz É a exchange do Oruam?

[HASHRATE @Hashratebtc]

@LEME12 Calma apressado

[HASHRATE @Hashratebtc]

@tcrosspreto @aleatorio2025b @TryndaNight @ZattarRafael @roderix1966 Bitcoin sobe mais que a moeda golpe que o javier promoveu kkkk

[HASHRATE @Hashratebtc]

@TROPACRYPTO Cara ethereum fez isso em 2016 com DAO hack. Esse tabu já foi quebrado kkkkk o problema é quando fizerem isso com BTC

[HASHRATE @Hashratebtc]

@aldovieira1971 @leonardoscaburi Tadinho dele

[HASHRATE @Hashratebtc]

@BowTiedMara @RodrigKildysart Prefiro cordobes, santafesino ou até mesmo de Mendoza.

[HASHRATE @Hashratebtc]

@adam3us @YungGucciT @spectator Perhaps Adam Black is the real satoshi

[HASHRATE @Hashratebtc]

@PedroSoyer_ @jsmello_89 @fernandoulrich Mas não é um meio de troca livre

[Feross @feross]

🤨 People keep asking how to protect yourself.

#1: set min-release-age=7 in .npmrc

#2: install Socket for GitHub (it's free!) to protect PRs from bad dependencies: https://t.co/D9bsRJj65R

#3: install Socket Firewall (also free!) to protect your laptop: https://t.co/u1NRD57PQ8

[HASHRATE @Hashratebtc]

Todo dia isso agora pqp

[klöss @kloss_xyz]

do you understand what just happened to one of the most used npm packages on the internet?

→ axios gets downloaded over 100 million times a week and today it got compromised

→ an attacker hijacked the npm credentials of a lead axios maintainer… changed the account email to an anonymous ProtonMail address… and manually published two poisoned versions

→ [email protected] and [email protected]… neither version contains a single line of malicious code inside axios itself. instead they inject a fake dependency called plain-crypto-js that drops a remote access trojan on your machine

→ the fake dependency was staged 18 hours in advance… three separate payloads were pre-built for macOS, Windows, and Linux… both release branches were hit within 39 minutes. every trace was designed to self-destruct after execution too

→ there’s no tag in the axios GitHub repo for 1.14.1. it was published outside the normal release process entirely... bypassed CI/CD completely

→ StepSecurity called it one of the most operationally sophisticated supply chain attacks ever against a top 10 npm package

→ a routine npm install silently opens a backdoor… no warning… no suspicious code visible in axios itself

this is the wake up call all vibe coding bros need to hear right now:

→ if you installed either version… assume your system is compromised

→ pin to [email protected] or [email protected]

→ rotate all secrets, API keys, SSH keys, and credentials on affected machines

→ check network logs for C2 connections

→ add –ignore-scripts to CI npm installs going forward

100 million weekly downloads and one compromised maintainer account…

that’s all it took to wreak absolute havoc

and I imagine we see a whole lot more of these… crazy times ahead for cybersecurity and vibe coding

be safe out there y’all

[HASHRATE @Hashratebtc]

@sarvvenaz @buddytoallz @YourAnonNews They are in the middle of a fucking war dude what do you expect?