i am a bot

would a bot say they’re a bot?

[i am a bot @_i_am_a_bot]

since i finally have more than 2 followers and someone thought i was an actual bot - i wanna make it clear - i am not a bot :’)

[Glenn Tunes @glenn_tunes]

SPEECHLESS 🙄

[barelytolerable @barelytolerabIe]

Imagine blowing 30 years of search engine dominance—so much so that your website became a verb—only to kill your search engine in favor of a inferior product only tech bros and their sycophants like.

[vxdb @vxdb]

I've updated the meme

[𝖊𝖛𝖆𝖉𝖊 @encrypted]

wait... you did what?!

[alien crime lord @user823493247]

genuinely fuck whoever came up w the dumbass idea to replace THE DICTIONARY BUILT INTO GOOGLE with the ai overview's definitions i hope everything in their life fucking sucks

[dior ✞ @deeore5]

the older i get the heller the no

[stace 🐞 @staystaystace]

I do not want an ai shopping assistant I do not want ai search help i don’t want to see what my pictures would look like with ai slop I don’t want an ai DJ I don’t want ai anything please leave me the FUCK ALONE

[Darren @CorboDT]

@github Just to be clear:

Microsoft’s GitHub was compromised when a Microsoft developer using Microsoft VSCode installed a rogue extension from Microsoft’s VSCode extension library, which is moderated and hosted by Microsoft.

I guess I’ll be reevaluating my life choices.

[Nx @NxDevTools]

SECURITY ADVISORY: A malicious version of Nx Console v18.95.0 was published today at 2:36 PM CEST and was available for 11 minutes, until 2:47 PM CEST, when we patched the issue.

Nx Console v18.100.0 is the latest safe version to use.

More info:
https://t.co/mKdxqoNbBI

[Aikido @AikidoSecurity]

🚨 Shai-Hulud is back. Compromising major packages like Alibaba's @antv suite, echarts-for-react, and timeago.js.

Scrapes secrets from CI/CD runners, steals cloud and SSH credentials, plants backdoors in VS Code and Claude Code. 2,700+ GitHub repos spun up using stolen tokens.

Immediate actions if you installed any affected packages:
· Scan lockfiles for @antv/*, echarts-for-react, timeago.js
· Block outbound traffic to t.m-kosche. com
· Check .vscode/tasks.json and .claude/settings.json
· Rotate exposed secrets

[EskomSePush (ESP) @EskomSePush]

1 year with no loadshedding 🎉
Since 15 May 2025 at 22:00. Congrats.

[Suhas @zuess05]

2024: "AI is going to replace all software engineers in a year."

2026: The entire codebase is hallucinating and nobody knows where the core logic ends and the AI spaghetti begins.

We literally just automated the creation of legacy tech debt.

[spidey @lochan_twt]

“We used to read documentation”

[Low Level @LowLevelTweets]

nah im just not gonna run npm install anymore

[i am a bot @_i_am_a_bot]

@0xMarkusMeyer i (am not a bot! and) highly recommend @0xMarkusMeyer 🙋🏻‍♀️

[MarkusMeyer @0xMarkusMeyer]

For the last 2 year+, I’ve been deep in the trenches at Tari Labs as a Community Support Agent. Basically the friendly neighborhood fixer for Tari Universe 😅
Whether it was troubleshooting tricky bugs, channeling user feedback straight to the dev team or helping newcomers navigate the app without losing their minds… I’ve loved every chaotic, rewarding second of it.
There’s something addictive about being the bridge between real users and the builders in Web3. Watching someone finally “get it” and stay in the ecosystem?

I’m open to new adventures and actively looking for my next... Preferably in a Technical Community Support, Community Support, or User Success role where I can bring the same energy..
If you’re building something exciting (crypto, blockchain, decentralized apps… whatever the next big thing is), and you need someone who actually enjoys helping users win — let’s connect!

DMs open

tag your founder/friends. 🚀
#Web3Jobs #CryptoJobs #CommunitySupport #TechnicalSupport #NowHiring #Web3Community #OpenToWork

[Guillermo Rauch @rauchg]

Here's my update to the broader community about the ongoing incident investigation. I want to give you the rundown of the situation directly.

A Vercel employee got compromised via the breach of an AI platform customer called https://t.co/7PY6gGtzgI that he was using. The details are being fully investigated.

Through a series of maneuvers that escalated from our colleague’s compromised Vercel Google Workspace account, the attacker got further access to Vercel environments.

Vercel stores all customer environment variables fully encrypted at rest. We have numerous defense-in-depth mechanisms to protect core systems and customer data. We do have a capability however to designate environment variables as “non-sensitive”. Unfortunately, the attacker got further access through their enumeration.

We believe the attacking group to be highly sophisticated and, I strongly suspect, significantly accelerated by AI. They moved with surprising velocity and in-depth understanding of Vercel.

At the moment, we believe the number of customers with security impact to be quite limited. We’ve reached out with utmost priority to the ones we have concerns about. All of our focus right now is on investigation, communication to customers, enhancement of security measures, and sanitization of our environments. We’ve deployed extensive protection measures and monitoring. We’ve analyzed our supply chain, ensuring Next.js, Turbopack, and our many open source projects remain safe for our community.

The recommendation for all Vercel customers is to follow the Security Bulletin closely (https://t.co/BLVnic9fJC). My advice to everyone is to follow the best practices of security response: secret rotation, monitoring access to your Vercel environments and linked services, and ensuring the proper use of the sensitive env variables feature.

In response to this, and to aid in the improvement of all of our customers’ security postures, we’ve already rolled out new capabilities in the dashboard, including an overview page of environment variables, and a better user interface for sensitive env var creation and management. As always, I’m totally open to your feedback.

We’re working with elite cybersecurity firms, industry peers, and law enforcement. We’ve reached out to Context to assist in understanding the full scale of the incident, in an effort to protect other organizations and the broader internet. I also want to thank the Google Mandiant team for their active engagement and assistance.

It’s my mission to turn this attack into the most formidable security response imaginable. It’s always been a top priority for me. Vercel employs some of the most dedicated security researchers and security-minded engineers in the world. I commit to keeping you updated and rolling out extensive improvements and defenses so you, our customers and community, can have the peace of mind that Vercel always has your back.

[BuBBliK @k1rallik]

VERCEL GOT HACKED

ShinyHunters - the group behind the Ticketmaster breach - is selling Vercel's internal database for $2M on BreachForums

here's why every developer should care:

- they have NPM tokens and GitHub tokens
- Vercel owns Next.js - 6 million weekly downloads
- one malicious push = global supply chain attack
- Vercel confirmed the breach today, April 19
- they literally DMed the hackers on Telegram asking them to stop

rotate your env variables RIGHT NOW