noid

Slopsec connoisseur

[noid @__noided]

Announcing my rejected talk for @bsidespyongyang:

Is that "web3 enthusiast" follower with the anime PFP acting suspicious?

Find out if you have confirmed North Korean followers at https://t.co/sR2776PBF2.

[noid @__noided]

@MartinShkreli Deepseek

[noid @__noided]

@__Raiders I also stick with a similar setup. The new /advisor is pretty good at elevation when it needs to

[noid @__noided]

@ClownOblast @max_spero_ Luckily, a grant

[noid @__noided]

@_xpn_ @cloudsmith You can do cooldown policies with CS?

https://t.co/uhy0waeTxc

[noid @__noided]

@crypto_domin You can actually use Dune for this instead of having to tab through hundreds of pages!

https://t.co/7Md64thNRJ

[noid @__noided]

Link to my query: https://t.co/dqsNXAmeWs

Feel free to fork or adapt for other chains. This works in the free tier as long as you reasonably bound the date search window.

[noid @__noided]

@cvhessert @m4rio_eth Should name and shame

[noid @__noided]

@enjojoyy @EthPrague If you haven't already can you please report the domain to SEAL911 for tracking and blocking? https://t.co/sP4BWMUusE

[albina @enjojoyy]

Scam alert🚨

A fake account of one of @EthPrague organizers reached out to me and asked to join a workspace

Some people I know also got targeted from other fake accounts

Be extremely careful and never copy and run scripts that you don't know, even if they're from "Google".

[noid @__noided]

@inf0stache I have something similar and tbh it's a little shocking that the official NPM team can't do the same

[noid @__noided]

>hacker "did something"
>The money is gone

Thank you for attending my PM

[Tay 💖 @tayvano_]

lmaooooooooooooooooo "we're not a casino" doesn't make up for your atrocious post-mortems

(regarding summer 2021 exploit #2...or maybe #3. this one 0x3a196410a0f5facd08fd7880a4b8551cd085c031)

[noid @__noided]

5 hours old. Detected by @SocketSecurity as malware. @sonatype flags as suspicious but not malicious.

[noid @__noided]

I get a lot of mileage out of searching for just a bit larger Levenshtein distance for similar packages. Not really practical for an enterprise deployments but you get a lot of good candidates > 2-3 chars.

pulse-axios - malware on NPM

Eval.js has an unobfuscated loaded.

[noid @__noided]

@solarise_webdev @billclerico You need to do:

/goal plant and harvest tomatoes

[noid @__noided]

@sonatype @SocketSecurity There should be no less than a dozen yara rules firing on this. Looks like regular https://t.co/GWcKqTbg2Q patterns. Huge entropy. Node OS shelling.

[noid @__noided]

Another one from the same family - not detected by @sonatype or @SocketSecurity yet (env-threads)

Same C2
https://t.co/uD3PiYZXHh

[noid @__noided]

NPM Malware Alert - https://t.co/BJ5bO6Bwb4

All versions drop a Windows stealer. Still live on NPM right now. Your pnpm cooldown scripts might not stop this - first commit was a month ago.

IOCs:
- emphasis-friday-even-administrator<.>https://t.co/CeVevaBKf7

[noid @__noided]

@devs_lyfe @rez0__ Not for Anthropic!

[noid @__noided]

@pnpmjs Kinetic attacks on ransomware operators

[noid @__noided]

@0xdoug "So what you do at Amazon, is you take the specifications from the customers, and you bring them down to Claude..."

[noid @__noided]

@vxunderground It would be better for society if threat actors faced off against each other like in Drumline