Andrew Rosen

Professor of Computer Science. Occasional Orchestrator.

[Keren 🇮🇱 @AbitbolKer8544]

😳 😱 omg 🙃🤣🤣🤣🤣

[Saul Sadka @Saul_Sadka]

Massive celebrations in Tel Aviv right now, as the Mossad plot to get Argentina into the World Cup final has succeeded. This will go down as the greatest victory since the beeper operation.

[Yaakov Langer @jacklanger]

Gefilte Fish shawarma. 🤦🏻

EVERY SINGLE Jewish person can agree that we don’t need this.

[Kathryn Paisner @KathrynPaisner]

I know “systemic racism” was sooooo 2020, but this is what systemic racism actually looks like.

When people feel comfortable saying these things on camera, at work and in uniform, it’s an institutional issue.

[DIEM @DiemArchive]

sigue @diem_spanish

[Andrew Rosen @abrosen]

@YoshiG90 @Boldyboy1975 I'm impressed your neighbor can handle these dogs when your neighbor is only 5 months old.

[Dan 🇮🇪 ✡️ @danielthemate]

Pride march in Brussels will only let Jewish people take part once they don't identify as Jewish. This is our reality in Europe in 2026.

[Interesting AF @interesting_aIl]

Programmers were asked to create the worst user experience poossible:

[Aakash Gupta @aakashgupta]

North Korean intelligence agents built an entire fake company to compromise one JavaScript developer. And it worked.

UNC1069 didn't hack Axios. They befriended its maintainer. They cloned a real company founder's identity, built a branded Slack workspace with fake employee profiles and LinkedIn post channels, then scheduled a Microsoft Teams call with what appeared to be a full team. During the call, a fake error message said his system needed an update. He installed it. That update was the RAT.

From one developer's laptop, they had everything: npm credentials, publishing access, the keys to a package installed in 80% of cloud environments. Axios gets 100 million downloads per week. The attackers published two poisoned versions at 12:21 AM UTC on a Sunday night, tagging both the latest and legacy branches within 39 minutes. The malicious dependency had been pre-staged 18 hours earlier with a clean decoy version to build registry history. Three separate RAT payloads were pre-built for macOS, Windows, and Linux. The malware self-deleted after execution to erase forensic evidence.

The poisoned versions were live for about three hours before npm pulled them. Huntress observed 135 endpoints across all operating systems calling the attacker's command-and-control server during that window. Wiz found the malicious versions in roughly 3% of environments scanned. Every affected machine needs full credential rotation: npm tokens, AWS keys, SSH keys, CI/CD secrets, everything in .env files.

The part that keeps getting worse: this isn't isolated. The same threat cluster compromised Trivy (a security scanner), KICS, LiteLLM, and multiple GitHub Actions in the two weeks before Axios. Google estimates hundreds of thousands of stolen secrets are now circulating from these combined attacks. The maintainer had 2FA enabled. He said himself: "I have 2FA/MFA on practically everything." The exact method of token compromise is still undetermined.

One person. One fake Teams call. 100 million weekly downloads weaponized in under three hours. The npm ecosystem runs on mass trust in individual maintainers who volunteer their time, and North Korean intelligence now has a repeatable playbook for turning that trust into a delivery mechanism.

[བསྟན་འཛིན། 🇮🇳🇺🇦🇹🇼 @BanzaiMusk]

Middle East: *Literally facing the largest war in years which has global ramifications*

Jordanian Police subplot:

[Epstein Secrets @EpsteinSecrets]

We searched 852,000 Epstein documents for "pizza," "ice cream," "hot dog," "walnut sauce," and every alleged food "code word."

823 documents mention pizza. 464 mention ice cream.
Every. Single. One. Is about actual food.

But what we found instead might be worse... 🧵

[あひるさん @5ducks5]

🇯🇵の知人が「お前🇺🇸詳しいだろ？今年の春にサンフランシスコ、ロサンゼルス、レッドウッド国立公園とか、カリフォルニアを3泊4日くらいで回ろうと思ってるんだけど、他に行った方がいいところがあったら教えて！」と言ってきたので下の画像を送って赤枠がカリフォルニア州だと伝えたら返事が途絶えた。

[The Mossad: Satirical and Awesome @TheMossadIL]

There are so many Mossad agents operating in Iran right now that I bumped into a guy at the market and accidentally said "סליחה".

Before realizing I may have accidentally blown my cover the other guy answered, "הכל טוב אחי".

[Brianna Wu @BriannaWu]

I’ve seen a lot of shocking things in my life. I remember seeing the guy jump of the Twin Towers on 9/11 and ugly weeping for an hour.

I’ve never seen anything as horrific as Palestinian civilians kidnapping children, murdering their mother and strangling infants to death. Then parading the coffins through the streets in jubilation.

[Andrew Rosen @abrosen]

@mattyglesias Kids these days get all the exciting stuff. My generation had to settle for boring old chemtrails.

[Max 📟 @MaxNordau]

“We wanted to say that Israel was committing genocide, so we changed the definition of genocide.”

[Yehuda Teitelbaum @chalavyishmael]

This shouldn't need to be said but people chanting songs you don't like and pulling down flags is not a reason to go on a violent and sadistic rampage against the Jews of an entire city.

The attempted spin is sickening.

The world sees you for what you are.

Nazis.

[Andrew Rosen @abrosen]

@HenMazzig A question I hope get answered is how many American Jews decided not to vote. Turnout for Harris was much lower compared to Biden.

[Open Source Intel @Osint613]

WATCH⚡️

In Rockland County, NY, many of the volunteers serving in the government-run EMS are visibly Jewish.

Listen to this:

"The patient is requesting [there be] no Jewish providers on the ambulance. Can you see if we can accommodate?"

Repeat?

"The patient does not want to be treated by anyone Jewish."

@YossiGestetner