Radiación Ultraviolenta 🎧

净化不洁之地 | White Monkey | HTTP418

[Jacob Eiting @jeiting]

pre-ai, bad ideas were just bad ideas, now bad ideas are bad ideas with charts and tables

[santi @santtiagom_]

programar era diez mil veces más divertido que escribir markdowns 🫠

[Socket @SocketSecurity]

AI has taken over open source, and the data is wild:

• npm is now seeing 100k+ packages published per month
• packages with em dashes in READMEs jumped from ~5% to 30%+
• AI is increasingly writing packages and choosing dependencies

More here: https://t.co/9d0xFhAJQB

[vx-underground @vxunderground]

Unfathomable banger

[Paul Bohm @paulbohm]

If your startup does not have a UUID microservice you’re ngmi

[John Bumstead @RDKLInc]

I have finally found the most beautiful computer. New old stock from 1980. Never been turned on.

[Theo - t3.gg @theo]

When my Claude does a good job I let it have a few api keys as a little treat

[Rhys @RhysSullivan]

serving a page from /wp-login.php on my nextjs site just so crawlers can feel like they have a win

[orph @orphcorp]

information is free because saturating your cognition & preventing you from taking action is the product

[Radiación Ultraviolenta 🎧 @_anyhow_]

@GregMolnar magnet for macos is pretty good, combined with spaces it works just fine

[Polymarket @Polymarket]

JUST IN: Justin Bieber’s Bored Ape NFT — which he purchased for $1.3 million in 2022 — is now valued at just $12,000.

[Maximilian @maxedapps]

👀

[Midtown Mikey @midtownmikey_]

@Polymarket Claude when it remembers every single time I’ve called it a pussy ass bitch

[vx-underground @vxunderground]

There is a project on GitHub called Axios.

Axios is extremely popular. It is used by millions upon millions of applications.

Axios is a programming library that helps your JavaScript code make HTTP/S requests (communicate with websites).

In simple terms, if you're a programmer doing something with JavaScript, and want to do stuff that communicates with a website in literally any capacity, people heavily recommend using Axios due to its simplicity. Using Axios you don't have to reinvent the wheel and do a bunch of work. All you need to do is import Axios into your code and you're off to the races.

Someone (currently unknown) compromised Axios (currently unknown how) to deliver malware to people. When someone updates or installs Axios, Axios itself contains malware.

What the malware does is (currently) unknown, but it is being reversed engineered by probably every malware analyst on the planet at this moment. In a few hours more details will emerge. Information is being exchanged in real time on social media and private communication platforms as I write this.

Due to the size and popularity of Axios, it is unknown how many are impacted, it could be millions, it could be thousands, or if we're lucky, only hundreds of people or organizations will be impacted.

If this is absolute worst case scenario, millions of organizations across the planet have been infected with malware which (currently) we do not understand. However, the likelihood of this is low. It appears Axios being compromised was detected quickly, potentially within minutes (or hours) of it being compromised to deliver malware. Additionally, the likelihood of every single Axios user updating Axios as soon as it was compromised to deliver malware is astronomically low. It is basically zero.

The impact from Axios being compromised is devastating, the fallout from this will be a massive headache. This is unironically a malware nuclear missile and will likely be studied in the future.

[Damián Catanzaro ☕️ @DamianCatanzaro]

$380b company

[Radiación Ultraviolenta 🎧 @_anyhow_]

@locosombrero @LuismiLabs no lo probé, pero se me ocurre que quizá puedas hacer algo con firefox para solucionar el handoff