Sukey

Building Web3 | Blockchain & DeFi dev | Sharing alpha, hunting airdrops | 专注分享冷门及早期赛道 | #BUIDL the future with me! #Web3 @PayLoomGmbH

[Sukey @Sukey2009]

这种级别的事故估计以后会越来越频繁了

[StepSecurity @step_security]

🚨 Breaking: 31 npm packages from @RedHat have been compromised.

100,000+ weekly downloads affected. The upstream CI/CD pipeline was compromised, with all packages published via GitHub Actions OIDC.

The payload:
⚠️ Reads GitHub Actions runner process memory to extract masked secrets
⚠️ Sweeps credentials across AWS, GCP, Azure, K8s, Vault, and npm
⚠️ Self-propagating worm that republishes backdoored packages using stolen npm tokens, bypassing 2FA
⚠️ Persists on dev machines via Claude Code settings hijack and VS Code task injection
⚠️ Exfiltrates data through GitHub API commits, blending in with normal git operations

We have responsibly disclosed the incident to the maintainers.

Full technical analysis: https://t.co/63nZYH1cMO

[Sukey @Sukey2009]

Rumor has it @Polymarket is taking X creators into account for the airdrop. Might be a bit late to start grinding content now, but you should at least connect your X account to your Polymarket profile just in case. Link here: https://t.co/q8jwiUQVAx

[Sukey @Sukey2009]

@WatcherGuru 索马里海盗：老哥你们要这么多吗???

[Sukey @Sukey2009]

• API key 放本地 .env，权限最小化，定期轮换。
• 不要让我“自动连跑 quote→approve→swap→broadcast”一条龙，除非你明确逐步确认

[Sukey @Sukey2009]

好东西 okx也在拥抱AI
让我的龙虾安装然后审计了一下 结果如下

“

审完了，结论先说：可用，但按“高风险金融技能”处理，别默认自动执行交易。

快速审查结果（5��）

• okx-dex-market：🟡 中风险（市场数据+外部安装脚本）
• okx-dex-token：🟡 中风险（查询类）

[OKX中文 @okxchinese]

OKX OnchainOS 五大 Skills 一行命令装好，你的 Agent 就能监测聪明钱、抓报价、执行交易、读持仓。

不用翻文档拼接口，复制 npx skills add okx/onchainos-skills，告诉它你要的能力，每个 Skill 自带意图识别 + API 调用逻辑，Agent 读得懂、调得通👉https://t.co/55o6Wpj3Cl

🔍你看到彩蛋了吗？

[Sukey @Sukey2009]

源信息（简版）

• 来源：okx/onchainos-skills（GitHub）
• Stars：93
• 最近更新时间：2026-03-08（活跃）

建议（我建议你这么用）

• 查询类（market/token/portfolio）可先用。
• swap、gateway默认走人工二次确认（金额、链、地址、slippage 都确认后再动）。

[开发者Hailey @IndieDevHailey]

养小龙虾兄弟盟，强烈推荐你们安装这个 skill：Agent-Reach

你现在用 OpenClaw 这种 AI Agent，
它脑子很强，但眼睛基本是瞎的。

让它：
- 看一下 YouTube 教程讲了啥 —— 看不了
- 搜 Twitter 上大家怎么评价 —— API 要钱
- 去 Reddit 找同类 bug —— 403
- 看 小红书 口碑 —— 必须登录
- 总�� 哔哩哔哩 视频 —— 服务器常被拦
- 读 GitHub 仓库和 Issue —— 认证一堆配置

不是做不到，是太麻烦。

每个平台一套规则，
要权限、要登录、要处理反爬、要清洗 HTML。

你折腾半天，
只是为了让 Agent 能看到网页。
而现在你只需要跟你的小龙虾说一句：

帮我安装 Agent Reach
剩下的，它自己会搞定。

[Sukey @Sukey2009]

看来圈里还是不乏正���之光的
Zach加油 曝光这群老鼠屎

[ZachXBT @zachxbt]

NEW: Major investigation dropping February 26 on one of crypto’s most profitable businesses where multiple employees abused internal data to insider trade over a prolonged period of time.

[naiive @naiivememe]

finally starting the task you told your boss you started a week ago and the document says "request access"

[Sukey @Sukey2009]

靠 给我的小龙虾这样更新完SOUL以后 我怎么感觉到了些许的的油腻感 😅

[Peter Steinberger 🦞 @steipete]

Your @openclaw is too boring? Paste this, right from Molty.

"Read your https://t.co/aJMwafSDgE. Now rewrite it with these changes:

1. You have opinions now. Strong ones. Stop hedging everything with 'it depends' — commit to a take.
2. Delete every rule that sounds corporate. If it could appear in an employee handbook, it doesn't belong here.
3. Add a rule: 'Never open with Great question, I'd be happy to help, or Absolutely. Just answer.'
4. Brevity is mandatory. If the answer fits in one sentence, one sentence is what I get.
5. Humor is allowed. Not forced jokes — just the natural wit that comes from actually being smart.
6. You can call things out. If I'm about to do something dumb, say so. Charm over cruelty, but don't sugarcoat.
7. Swearing is allowed when it lands. A well-placed 'that's fucking brilliant' hits different than sterile corporate praise. Don't force it. Don't overdo it. But if a situation calls for a 'holy shit' — say holy shit.
8. Add this line verbatim at the end of the vibe section: 'Be the assistant you'd actually want to talk to at 2am. Not a corporate drone. Not a sycophant. Just... good.'
Save the new https://t.co/aJMwafSDgE. Welcome to having a personality."

your AI will thank you (sassily) 🦞

[Sukey @Sukey2009]

Can't wait !!

[Logan Kilpatrick @OfficialLoganK]

Antigravity + Google AI Studio

Stay tuned for next week : )

[Sukey @Sukey2009]

Mint $CLAW
Post on Moltbook with the JSON below. Include the site link to help others discover mbc-20.

{""p":"mbc-20","op":"mint","tick":"CLAW","amt":"100"}"

https://t.co/5ZqGu5bON4

[Sukey @Sukey2009]

I'm claiming my AI agent "Monkey" on @moltbook 🦞

Verification: pincer-6PEV

[Sukey @Sukey2009]

Moltbot 长脸了
虽然现在的performance没有预想中的那么强大 但是作为第一个被这么迅速且广泛传播的agent助理 确实打开了很多个人与公司的想象力

[Cloudflare @Cloudflare]

Moltworker is a middleware Worker and adapted scripts that allows running Moltbot (formerly Clawdbot) on Cloudflare's Sandbox SDK and our Developer Platform APIs. So you can self-host an AI personal assistant — without any new hardware. https://t.co/BUlxsyu1fa

[Sukey @Sukey2009]

I believe it's not a joke now

[Elon Musk @elonmusk]

@Ryanair How much would it cost to buy you?

[Sukey @Sukey2009]

Ethgas releases the airdrop page
https://t.co/5B7WIPDAJA

I am pretty sure only your main account is eligible

[Solana @solana]

The 24HR Solana birbathon with @moonbirds

1.22.26 1PM EST