André Lima

Father / Husband / Web

[André Lima @andrefagl]

@mrt_510 @SportingCP 💚💚💚

[TANSTACK @tan_stack]

SECURITY ADVISORY — TanStack npm packages
A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package.
Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down.
Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys.
If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised:
• Rotate cloud, GitHub, and SSH credentials immediately
• Audit cloud audit logs for the last several hours
• Pin to a prior known-good version and reinstall from a clean lockfile
Detection — the malicious manifest contains:
"optionalDependencies": {
"@tanstack/setup": "github:tanstack/router#79ac49ee..."
}
Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root).
Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level.
Full technical breakdown, complete package and version list, and rolling status updates:
https://t.co/Zy8qG7PA9f
Credit to the security researcher for responsible disclosure.

[André Lima @andrefagl]

@GonzaaaaaaL Incrível 💪👏

[André Lima @andrefagl]

@castrojr76 Bastante infeliz

[André Lima @andrefagl]

@_Goalpoint @fodasse1893 Eish não vale bujas 😅

[André Lima @andrefagl]

@DrizzleORM 😂

[André Lima @andrefagl]

@castrojr76 💯

[André Lima @andrefagl]

Este jogo de cones 👌 Bendito karma 😇

[André Lima @andrefagl]

@castrojr76 💯
É por intervenções destas que este é o único programa de futebol que eu assisto 👏

[Sporting CP @SportingCP]

RT se és 𝐁𝐈𝐂𝐀𝐌𝐏𝐄𝐀̃𝐎 𝐍𝐀𝐂𝐈𝐎𝐍𝐀𝐋 🤩💚

[Jesse Tinsley @JesseTinsley]

It’s not Return to Office (RTO).

It’s Return to Mediocrity.

The best people already figured it out.

They’re working normal jobs, raising their kids, building side hustles, staying fit and outperforming everyone chained to a desk at 9:03am.

The worst people? Still think sitting in a $900 ergonomic chair near Chad from Finance is a productivity hack.

Let’s be honest RTO isn’t about collaboration.

It’s about control.

It’s the insecure VP who doesn’t know how to manage outcomes.

It’s the financially constrained CEO trying to justify that 10-year lease.

It’s the mid-tier exec whose only skill is scheduling meetings.

Here’s the reality:

If you’re great you’re productive anywhere.

If you’re mediocre you need a babysitter.

We’re not going back. Not because we hate the office...

We’re not going back because we finally realized time is the currency not free snacks and fake "family" culture.

Build for outcomes.

Not optics.

[André Lima @andrefagl]

@Joaopedrodcf @mattpocockuk They still harmful 😅

[André Lima @andrefagl]

@_Goalpoint Embrulha que tá quentinha

[André Lima @andrefagl]

@GonzaaaaaaL Tas a ver mal

[André Lima @andrefagl]

@netflix 💔

[Matthew Todd 🌏🔥 @MrMatthewTodd]

I didn’t make this and it could easily have been a man as a woman, but it’s true. There is a train about to hit us and we refuse to look up from the mirror.

[André Lima @andrefagl]

@mironcatalin You got this! Gl man 💪

[sport tv @sporttvportugal]

Que ambiente 😍

#sporttvportugal #LIGAnaSPORTTV #ligaportugalbetclic #sportingcp

[Sporting CP @SportingCP]

FOI JOGO A JOGO, LADO A LADO, ATÉ AO ÚLTIMO MINUTO!

Podemos gritar ao mundo que somos CAMPEÕES! 🦁 🏆

[Sporting CP @SportingCP]

🟢⚪ CAMPEÕES NACIONAIS 2023/2024 ⚪🟢

Esforço, Dedicação, Devoção e GLÓRIA 🏆