Macharia MD

@_mPhil

Surgery & Research

Joined June 2009

653 Following

472 Followers

5.1K Posts

Macharia MD @_mPhil

about 2 months ago

So, the Dr opened the boot to remove the gearbox? Intellectual incompetence in the seemingly "learned" Kenyan populace is root of all evil!

The Kenyan Vigilante

@KenyanSays

about 2 months ago

Shock as Woman Claims Kidney Was Removed Without Consent During Routine Surgery A disturbing case has emerged involving a woman who alleges that one of her kidneys was removed without her consent during what was meant to be a routine fibroid surgery in 2018. According to her account, she visited a hospital seeking treatment for fibroids and opted for surgery under the care of a doctor who had gained popularity through appearances on Inooro TV. Trusting the doctor’s reputation, she proceeded with the operation, expecting a standard medical procedure and recovery. However, months after the surgery, her health began to deteriorate. She developed unusual swelling in her face and legs, prompting concern and leading her to seek further medical evaluation. After undergoing a series of tests, she received shocking news: one of her kidneys was missing. The revelation raised serious questions about what may have transpired during the initial surgery. The woman maintains that she was never informed of any complications, nor did she consent to the removal of her kidney at any point. Her case now adds to growing concerns over alleged organ trafficking and unethical medical practices. Observers say the increasing number of similar reports could point to a wider, covert network operating behind the scenes. Investigations into the claims are expected to shed more light on what could be a deeply troubling trend.

KenyanSays's tweet photo. Shock as Woman Claims Kidney Was Removed Without Consent During Routine Surgery

A disturbing case has emerged involving a woman who alleges that one of her kidneys was removed without her consent during what was meant to be a routine fibroid surgery in 2018.

According to her account, she visited a hospital seeking treatment for fibroids and opted for surgery under the care of a doctor who had gained popularity through appearances on Inooro TV. Trusting the doctor’s reputation, she proceeded with the operation, expecting a standard medical procedure and recovery.

However, months after the surgery, her health began to deteriorate. She developed unusual swelling in her face and legs, prompting concern and leading her to seek further medical evaluation. After undergoing a series of tests, she received shocking news: one of her kidneys was missing.

The revelation raised serious questions about what may have transpired during the initial surgery. The woman maintains that she was never informed of any complications, nor did she consent to the removal of her kidney at any point.

Her case now adds to growing concerns over alleged organ trafficking and unethical medical practices. Observers say the increasing number of similar reports could point to a wider, covert network operating behind the scenes.

Investigations into the claims are expected to shed more light on what could be a deeply troubling trend.

162

54K

_mPhil retweeted

Dark Web Intelligence

@DailyDarkWeb

about 2 months ago

Kenya 🇰🇪 - AfyaRekod has allegedly been breached, compromising the personally identifiable information of over 258k patients. Attackers are demanding a $150k ransom to prevent the sale of sensitive medical data. https://t.co/dGPFGZL07l

DailyDarkWeb's tweet photo. Kenya 🇰🇪 - AfyaRekod has allegedly been breached, compromising the personally identifiable information of over 258k patients. Attackers are demanding a $150k ransom to prevent the sale of sensitive medical data. https://t.co/dGPFGZL07l https://t.co/gFmBoTQ2nQ

209

104

20K

_mPhil retweeted

Peter Girnus 🦅

@gothburz

2 months ago

On Tuesday morning my dependency audit caught Axios. Axios. 300 million weekly downloads. The HTTP library in every JavaScript project since 2016. The one nobody audits because auditing Axios is like auditing gravity. It was there before you got hired. I am a security engineer at a company that runs 14,000 npm packages in production. I know the number because I counted them last year. I do not know what most of them do. Nobody does. My audit runs every Tuesday morning. It takes eleven minutes. Eleven minutes is the only thing between us and whatever is in those packages. Most weeks it catches nothing. Most weeks I call that a clean bill of health. My audit runs every Tuesday morning. It takes eleven minutes. The malicious versions had been live on npm for hours. Not days. Hours. They dropped a remote access trojan. Not a sophisticated one. Not a nation-state zero-day. A trojan. In Axios. It just needs to be in the right package. Axios is in every package. I reported it to our incident response team at 9:14 AM. By 9:16 AM I had confirmation we'd pulled the affected version. By 9:23 AM I learned that our staging environment had already installed it. Automatically. At 6:07 PM. Monday evening. While everyone was going home. Here is what happened at 6:07 PM on Monday. Our dependency bot checked for updates. The bot is called Renovate. The bot runs after work hours. It runs after work hours because running it during business hours slows down CI for the engineers. So we moved it to 6 PM. When nobody is watching. The bot found a new version of Axios. The bot opened a pull request. The pull request was auto-merged because Axios is on our trusted list. I approved the trusted list. Eight months ago. I reviewed it for about as long as I review the 14,000 packages. Axios is on the list because it has 300 million weekly downloads. 300 million weekly downloads means it's safe. Except when it isn't. At 6:08 PM the CI pipeline ran. All tests passed. The tests passed because the trojan doesn't break tests. The trojan breaks trust. Trust is not a test case. At 6:08 PM the deployment pipeline triggered. It deployed to staging-east-2. At 6:09 PM the trojan phoned home. At 6:11 PM it began beaconing to a command server. At 6:14 PM it began enumerating environment variables. At 6:15 PM it found the database credentials. At 6:16 PM it found the API keys. All of them. At 6:18 PM it found the Stripe production token. There are 2.4 million customer records behind that token. At 6:19 PM it found the treasury wallet private keys. We process crypto payouts for enterprise clients. Not the main product. A feature. The keys were in an environment variable. Not encrypted. Not in a vault. In a .env file committed in 2021. Someone left a comment above them. "TODO: move to HSM." The TODO is four years old. At 6:20 PM the wallet started draining. $2.1 million. Twelve transactions across three chains in ninety seconds. By 6:22 PM the funds were bridged, mixed, and scattered. Not gone like the credentials are gone. Gone like physics. A blockchain cannot be rotated. At 6:23 PM the exfiltration completed. Sixteen minutes. Nobody was watching. Everyone was on the train. In the parking lot. Picking up their kids. The systems were still at work. The systems did exactly what we told them to do. What I told them to do. The bot checked for updates as designed. The auto-merge triggered as designed. The tests passed as designed. The deployment ran as designed. The trojan installed as designed. The credentials left the building as designed. Every system worked exactly as it was supposed to. That's the problem. We pulled the affected version Tuesday at 9:16 AM. Fifteen hours later. Pulling the version doesn't un-send the data. The database credentials are on a server we will never find. The API keys are on a server we will never find. The Stripe token connected to 2.4 million customers is on a server we will never find. We can rotate the credentials. We did rotate the credentials. It took fourteen hours. During those fourteen hours we did not know what was being accessed with the old ones. We still don't. We cannot rotate a blockchain. The $2.1 million is not in an account we can freeze. It is not in a bank we can subpoena. It is on a ledger where theft is permanent. Our CFO asked me when we'd recover the funds. I told her the funds are mathematically irrecoverable. She asked me what "mathematically" means in this context. It means the technology is working exactly as designed. She left the call. I sat there. Then I opened the dependency manifest. Not because I found something in those 14,000 packages. Because I realized I'd never actually looked. I am the person whose job it is to look. I had not looked. I marked the ticket Done. Here is what I found when I looked. Package 4,211 hadn't been updated in three years. Its maintainer's GitHub account had been inactive for two. Their last commit message said "finally done with this." I don't know if they meant the package or the industry. Their code still runs on our servers every day. Package 7,408 was a dependency of a dependency of a dependency. Nobody in the company had ever typed its name. Nobody in the company knew it existed. It had full access to our file system. Package 9,002 was called "request-utils." It had 14 downloads per week. Its maintainer hasn't logged into npm in six months. Their email domain expired three months ago. The code stays. The access stays. The maintainer disappears. Anyone who buys that email domain can reset their npm password. It's still in our production build. I found a package called "config-handler" that was added in 2019. The person who added it left the company in 2020. The Jira ticket that approved it said "Reviewed: No Issues Found." The reviewer was the same person who added it. They reviewed their own dependency. Then they left. The dependency stayed. I found a package called "event-pipe" whose maintainer's email domain expired last year. Expired domains can be purchased. Anyone who buys that domain can reset the npm password. Anyone who resets the npm password can push a new version. Anyone who pushes a new version will be auto-installed by our bot at 6 PM. I checked. The domain costs $11. Our production environment is eleven dollars away from the next Axios. I found a package called "log-sanitizer" that pins a version of a package that pins a version of a package that uses Axios. Three levels deep. It has a postinstall script. A postinstall script runs code on your machine the moment you install the package. Not when you use it. When you install it. Before you can read it. Before you can review it. Before you know what it does. I read the postinstall script. It downloads a second script from a URL. The URL is still live. I did not visit the URL. I do not know what the second script does. Nobody does. This package has been in our production build for three years. The postinstall script has run on every developer machine in the company. Every CI runner. Every staging server. Every production deployment. For three years. Including my machine. The laptop I used to run Tuesday's audit has been executing unknown code from an unreviewed URL since 2023. I am auditing the fire from inside the building. I do not know if my machine is compromised. I do not know if the audit I ran on Tuesday was run on a clean system. I do not know if the results I'm reading right now are the real results. I ran the tool that checks for breaches on a machine that may already be breached. This is the security. If I hadn't audited Axios I would never have known. I only audited Axios because Axios got caught. The other 13,999 packages have not been caught. Nobody has looked. My manager asked me to write a post-mortem. I wrote it. The root cause section says "a compromised version of a trusted dependency was automatically installed via our standard pipeline." Every word of that sentence means "we did this to ourselves on purpose." He asked me to add a "Lessons Learned" section. I wrote: "Implement manual review gates for critical dependencies." We will not implement manual review gates. Manual review gates would slow down deployments. Deployments are a metric. Metrics go in dashboards. Dashboards go in quarterly reviews. Slowing down deployments does not go in quarterly reviews. We have a thing called a "quarterly dependency review." It is a Jira ticket. The ticket is assigned to me. The ticket has been marked "Done" four quarters in a row. I mark it done every quarter. I do not review 14,000 packages every quarter. I run the eleven-minute audit. The eleven-minute audit checks for known vulnerabilities. It does not check for unknown ones. Unknown vulnerabilities are not in the database. They are in the code. The code is in the packages. The packages are in production. Production is everyone's problem. Everyone's problem is nobody's job. I looked. It is technically my job. I wish I hadn't. After the incident I joined a Slack channel called #supply-chain-security. It has 340 members. The last message before mine was from November. Someone had posted an article about the Log4j anniversary. It had two emoji reactions. One was a skull. The other was a pizza slice because it was posted on a Friday. We built a system that trusts strangers by default and requires paperwork to trust each other. Open source means anyone can read the code. It does not mean anyone does. We have 14,000 packages in production. I can name eleven. The bot that installs the other 13,989 runs every evening at 6 PM. Right when I leave. It doesn't read code. It reads version numbers. The version number said this was fine. Nobody checks what the version number means. Last night I was packing up at 5:58 PM. I saw the Renovate job queued in the pipeline dashboard. Two minutes. I watched it start. I watched it pull a new version of something I didn't recognize. I watched it auto-merge. I picked up my bag and walked to the elevator. The bot was still running when the doors closed. Tomorrow the Jira ticket will come around again. I will mark the ticket Done.

gothburz's tweet photo. On Tuesday morning my dependency audit caught Axios.

Axios.

300 million weekly downloads.

The HTTP library in every JavaScript project since 2016.

The one nobody audits because auditing Axios is like auditing gravity.

It was there before you got hired.

I am a security engineer at a company that runs 14,000 npm packages in production.

I know the number because I counted them last year.

I do not know what most of them do.

Nobody does.

My audit runs every Tuesday morning.

It takes eleven minutes.

Eleven minutes is the only thing between us and whatever is in those packages.

Most weeks it catches nothing.

Most weeks I call that a clean bill of health.

My audit runs every Tuesday morning.

It takes eleven minutes.

The malicious versions had been live on npm for hours.

Not days. Hours.

They dropped a remote access trojan.

Not a sophisticated one.

Not a nation-state zero-day.

A trojan.

In Axios.

It just needs to be in the right package.

Axios is in every package.

I reported it to our incident response team at 9:14 AM.

By 9:16 AM I had confirmation we'd pulled the affected version.

By 9:23 AM I learned that our staging environment had already installed it.

Automatically.

At 6:07 PM.

Monday evening.

While everyone was going home.

Here is what happened at 6:07 PM on Monday.

Our dependency bot checked for updates.

The bot is called Renovate.

The bot runs after work hours.

It runs after work hours because running it during business hours slows down CI for the engineers.

So we moved it to 6 PM.

When nobody is watching.

The bot found a new version of Axios.

The bot opened a pull request.

The pull request was auto-merged because Axios is on our trusted list.

I approved the trusted list.

Eight months ago.

I reviewed it for about as long as I review the 14,000 packages.

Axios is on the list because it has 300 million weekly downloads.

300 million weekly downloads means it's safe.

Except when it isn't.

At 6:08 PM the CI pipeline ran.

All tests passed.

The tests passed because the trojan doesn't break tests.

The trojan breaks trust.

Trust is not a test case.

At 6:08 PM the deployment pipeline triggered.

It deployed to staging-east-2.

At 6:09 PM the trojan phoned home.

At 6:11 PM it began beaconing to a command server.

At 6:14 PM it began enumerating environment variables.

At 6:15 PM it found the database credentials.

At 6:16 PM it found the API keys. All of them.

At 6:18 PM it found the Stripe production token.

There are 2.4 million customer records behind that token.

At 6:19 PM it found the treasury wallet private keys.

We process crypto payouts for enterprise clients.

Not the main product.

A feature.

The keys were in an environment variable.

Not encrypted.

Not in a vault.

In a .env file committed in 2021.

Someone left a comment above them.

"TODO: move to HSM."

The TODO is four years old.

At 6:20 PM the wallet started draining.

$2.1 million.

Twelve transactions across three chains in ninety seconds.

By 6:22 PM the funds were bridged, mixed, and scattered.

Not gone like the credentials are gone.

Gone like physics.

A blockchain cannot be rotated.

At 6:23 PM the exfiltration completed.

Sixteen minutes.

Nobody was watching.

Everyone was on the train. In the parking lot. Picking up their kids.

The systems were still at work.

The systems did exactly what we told them to do.

What I told them to do.

The bot checked for updates as designed.

The auto-merge triggered as designed.

The tests passed as designed.

The deployment ran as designed.

The trojan installed as designed.

The credentials left the building as designed.

Every system worked exactly as it was supposed to.

That's the problem.

We pulled the affected version Tuesday at 9:16 AM.

Fifteen hours later.

Pulling the version doesn't un-send the data.

The database credentials are on a server we will never find.

The API keys are on a server we will never find.

The Stripe token connected to 2.4 million customers is on a server we will never find.

We can rotate the credentials.

We did rotate the credentials.

It took fourteen hours.

During those fourteen hours we did not know what was being accessed with the old ones.

We still don't.

We cannot rotate a blockchain.

The $2.1 million is not in an account we can freeze.

It is not in a bank we can subpoena.

It is on a ledger where theft is permanent.

Our CFO asked me when we'd recover the funds.

I told her the funds are mathematically irrecoverable.

She asked me what "mathematically" means in this context.

It means the technology is working exactly as designed.

She left the call.

I sat there.

Then I opened the dependency manifest.

Not because I found something in those 14,000 packages.

Because I realized I'd never actually looked.

I am the person whose job it is to look.

I had not looked.

I marked the ticket Done.

Here is what I found when I looked.

Package 4,211 hadn't been updated in three years.

Its maintainer's GitHub account had been inactive for two.

Their last commit message said "finally done with this."

I don't know if they meant the package or the industry.

Their code still runs on our servers every day.

Package 7,408 was a dependency of a dependency of a dependency.

Nobody in the company had ever typed its name.

Nobody in the company knew it existed.

It had full access to our file system.

Package 9,002 was called "request-utils."

It had 14 downloads per week.

Its maintainer hasn't logged into npm in six months.

Their email domain expired three months ago.

The code stays.

The access stays.

The maintainer disappears.

Anyone who buys that email domain can reset their npm password.

It's still in our production build.

I found a package called "config-handler" that was added in 2019.

The person who added it left the company in 2020.

The Jira ticket that approved it said "Reviewed: No Issues Found."

The reviewer was the same person who added it.

They reviewed their own dependency.

Then they left.

The dependency stayed.

I found a package called "event-pipe" whose maintainer's email domain expired last year.

Expired domains can be purchased.

Anyone who buys that domain can reset the npm password.

Anyone who resets the npm password can push a new version.

Anyone who pushes a new version will be auto-installed by our bot at 6 PM.

I checked.

The domain costs $11.

Our production environment is eleven dollars away from the next Axios.

I found a package called "log-sanitizer" that pins a version of a package that pins a version of a package that uses Axios.

Three levels deep.

It has a postinstall script.

A postinstall script runs code on your machine the moment you install the package.

Not when you use it.

When you install it.

Before you can read it.

Before you can review it.

Before you know what it does.

I read the postinstall script.

It downloads a second script from a URL.

The URL is still live.

I did not visit the URL.

I do not know what the second script does.

Nobody does.

This package has been in our production build for three years.

The postinstall script has run on every developer machine in the company.

Every CI runner.

Every staging server.

Every production deployment.

For three years.

Including my machine.

The laptop I used to run Tuesday's audit has been executing unknown code from an unreviewed URL since 2023.

I am auditing the fire from inside the building.

I do not know if my machine is compromised.

I do not know if the audit I ran on Tuesday was run on a clean system.

I do not know if the results I'm reading right now are the real results.

I ran the tool that checks for breaches on a machine that may already be breached.

This is the security.

If I hadn't audited Axios I would never have known.

I only audited Axios because Axios got caught.

The other 13,999 packages have not been caught.

Nobody has looked.

My manager asked me to write a post-mortem.

I wrote it.

The root cause section says "a compromised version of a trusted dependency was automatically installed via our standard pipeline."

Every word of that sentence means "we did this to ourselves on purpose."

He asked me to add a "Lessons Learned" section.

I wrote: "Implement manual review gates for critical dependencies."

We will not implement manual review gates.

Manual review gates would slow down deployments.

Deployments are a metric.

Metrics go in dashboards.

Dashboards go in quarterly reviews.

Slowing down deployments does not go in quarterly reviews.

We have a thing called a "quarterly dependency review."

It is a Jira ticket.

The ticket is assigned to me.

The ticket has been marked "Done" four quarters in a row.

I mark it done every quarter.

I do not review 14,000 packages every quarter.

I run the eleven-minute audit.

The eleven-minute audit checks for known vulnerabilities.

It does not check for unknown ones.

Unknown vulnerabilities are not in the database.

They are in the code.

The code is in the packages.

The packages are in production.

Production is everyone's problem.

Everyone's problem is nobody's job.

I looked.

It is technically my job.

I wish I hadn't.

After the incident I joined a Slack channel called #supply-chain-security.

It has 340 members.

The last message before mine was from November.

Someone had posted an article about the Log4j anniversary.

It had two emoji reactions.

One was a skull.

The other was a pizza slice because it was posted on a Friday.

We built a system that trusts strangers by default and requires paperwork to trust each other.

Open source means anyone can read the code.

It does not mean anyone does.

We have 14,000 packages in production.

I can name eleven.

The bot that installs the other 13,989 runs every evening at 6 PM.

Right when I leave.

It doesn't read code.

It reads version numbers.

The version number said this was fine.

Nobody checks what the version number means.

Last night I was packing up at 5:58 PM.

I saw the Renovate job queued in the pipeline dashboard.

Two minutes.

I watched it start.

I watched it pull a new version of something I didn't recognize.

I watched it auto-merge.

I picked up my bag and walked to the elevator.

The bot was still running when the doors closed.

Tomorrow the Jira ticket will come around again.

I will mark the ticket Done.

563

418

148K

Macharia MD @_mPhil

3 months ago

That Island in Lamu is now a potential target by ICBMs

Who to follow

Wambui Chelagat

@AddyWambui

Views are mine. I do crosswords in pen. Pediatric surgery

Lara Devgan, MD

@LaraDevganMD

Board-certified plastic surgeon in New York City & founder of Dr. Devgan Scientific Beauty

kevin moracha

@kevin_moracha

Medicine and Medical surgery. Classic music. Businessman.

Macharia MD @_mPhil

3 months ago

@mureithi_me Common extortion scheme in Jo targeting foreigners esp visiting masters/PhD students & business people.

Macharia MD @_mPhil

3 months ago

@N1ppyTSG @iamKayitaMoses @jadinho97 English has been in Uganda longer than Uganda has been a country...isn't that your logic with Christianity & England?

Macharia MD @_mPhil

5 months ago

@JNyaliech @amenya_nelson Daktari, your statement is true but don't you think that you're practicing concrete reasoning which is a cognitive error. @amenya_nelson "D-" statement is about averages/distribution

Macharia MD @_mPhil

6 months ago

@Imonaar Daktari, I thought you confirmed it as a coordinated attack? It'd be interesting to know the specific matters that have been forwarded to the courts. It'd be interesting to know why people were emotionally dismissing allegations like sex grooming.

594

_mPhil retweeted

Sebastian Arruarana, MD

@sebas_arruarana

7 months ago

Great opportunity to be certified by the American Heart Association for free! In Project IMG we partnered with @American_Heart to earn the CPAHA (Certified Professional by AHA) which normally it’s $519 and we got it 100% complementary for our members and lasts 3 years and it’s also a boost for you CV! It is a professional certification for healthcare professionals to demonstrate expertise in specific areas like telehealth or digital health, helping to improve patient outcomes through standardized training and the integration of new technologies. To obtain your code, take this code and get certified please comment your email on this post: Important info: Exam must be scheduled by Dec 31, 2025!!

sebas_arruarana's tweet photo. Great opportunity to be certified by the American Heart Association for free!

In Project IMG we partnered with
@American_Heart to earn the CPAHA (Certified Professional by AHA) which normally it’s $519 and we got it 100% complementary for our members and lasts 3 years and it’s also a boost for you CV!

It is a professional certification for healthcare professionals to demonstrate expertise in specific areas like telehealth or digital health, helping to improve patient outcomes through standardized training and the integration of new technologies.

To obtain your code, take this code and get certified please comment your email on this post:

Important info: Exam must be scheduled by Dec 31, 2025!!

158

219K

_mPhil retweeted

Giovanni Marchegiani @Gio_Marchegiani

7 months ago

🍇 Surgical management of IPMN / MCN in 2025 … more for few / nothing for most! 🆓 read with updated flowcharts looking forward to 🆕 guidelines! 🫧 Still over treating / not tailoring enough! https://t.co/cNbWMJ5bFM

Gio_Marchegiani's tweet photo. 🍇 Surgical management of IPMN / MCN in 2025 … more for few / nothing for most!

🆓 read with updated flowcharts looking forward to 🆕 guidelines!

🫧 Still over treating / not tailoring enough!

https://t.co/cNbWMJ5bFM https://t.co/ZFLdvBrj66

204

117

17K

_mPhil retweeted

COSECSA @cosecsa

7 months ago

Application deadline for the Lindsay Stewart Prize 2025 has been extended to 7th November 2025 For more information https://t.co/aHNNRzSbpS Apply here: https://t.co/r9dZz1ybB5 #COSECSA #LindsayStewartPrize #SurgicalTraining #GlobalSurgery

_mPhil retweeted

Zhi Ven Fong, MD MPH DrPH @ZhiVenFongMD

7 months ago

Robotic Pancreatoduodenectomy with Segmental Portomesenteric Venous Resection and Primary End-to-End Reconstruction: Approach to a Tension-Free Anastomosis Full video in link below, comments and suggestions welcomed! https://t.co/TG3TduXarZ https://t.co/3MqtPBPAAR

ZhiVenFongMD's tweet photo. Robotic Pancreatoduodenectomy with Segmental Portomesenteric Venous Resection and Primary End-to-End Reconstruction: Approach to a Tension-Free Anastomosis

Full video in link below, comments and suggestions welcomed!

https://t.co/TG3TduXarZ

https://t.co/3MqtPBPAAR https://t.co/vOBzPeQSfY

166

20K

_mPhil retweeted

Dr. AK 🇮🇳

@docakx

8 months ago

RECTAL OXYGEN ADMINISTRATION Japanese scientists just tested a wild idea — intrarectal oxygen administration! 27 volunteers received rectal doses of perfluorodecalin, a liquid that carries oxygen with high efficiency.

docakx's tweet photo. RECTAL OXYGEN ADMINISTRATION

Japanese scientists just tested a wild idea — intrarectal oxygen administration!

27 volunteers received rectal doses of perfluorodecalin, a liquid that carries oxygen with high efficiency.

849

200

430

258K

Macharia MD @_mPhil

7 months ago

@DrAkhilX Rearvolutionary!

Macharia MD @_mPhil

over 1 year ago

Wild! Voluntarily admitting to financial crimes?

Coffeezilla

@coffeebreak_YT

over 1 year ago

Share it w/ your fellow KOLs https://t.co/B4IDuyWTgJ

559

Macharia MD @_mPhil

over 1 year ago

100.

Macharia MD @_mPhil

over 1 year ago

80. The bird is free!

Macharia MD @_mPhil

about 2 years ago

@farkomd How many years have they been operating? That is an outlier.

316

_mPhil retweeted

Carl Jung Archive

@QuoteJung

about 2 years ago

13K

795K

_mPhil retweeted

Jorge Fernandez @JorgeFe92949225

about 2 years ago

@IhabFathiSulima Attenuation of suspensory ligaments of Cooper causing breast ptosis. May be corrected w mammaplasty. In breast cancer, fibrosis of Cooper lig. causes "dimpling" of the overlaying skin + lymphatic obstruction gives rise to another important sign of breast cancer, peau d'orange.

26K

Macharia MD

@_mPhil

Who to follow

Last Seen Users on Sotwe

Trends for you

Most Popular Users