Benart

Building products with code.

[433 @433]

Norway's World Cup team photo goes 𝐇𝐀𝐑𝐃 🥶🇳🇴

[Teni 📷 @Leumasamyslimzy]

I'm still Chelsea 💙😂

But I can't lie, the atmosphere at the Arsenal parade was something else.

A few shots I captured yesterday. 📸

#arsenal #Epl #Saka #championsofengland #trophyparade #northlondonisred

[Benart @bencoderus]

@Leumasamyslimzy Too clean 🔥

[Manchester United @ManUtd]

Maximum impact, minimum fuss.

Senne Lammens has won the #PL's Transfer of the Season award for a fantastic first campaign at United! 🥇👏

[Premier League @premierleague]

A season for the history books 📖

@manutd's Bruno Fernandes is @EASPORTSFC Player of the Season ❤️

[B/R Football @brfootball]

He came, he saw, he conquered.

The Pep era is over 👑

[International Cyber Digest @IntCyberDigest]

‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code.

- Affects NGINX 0.6.27 through 1.30.0
- Triggered via the rewrite and set directives in config
- Update NGINX ASAP
- NGINX is a widely used HTTP web server, be sure to check its prevalence in other products

[Benart @bencoderus]

@garrytan Real

[Phil Eaton @eatonphil]

I first tried to read this book in 2018 and couldn't make it through because I thought it was too hard.

8 years later it's the only book I recommend every developer reads, and I had the chance to review the 2nd edition.

Join a study group, give it a read.

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Wes Bos @wesbos]

‼️Do not npm install or deploy anything right now

Supply chain attack on axios 1.14.1 - even if you don’t use axios it may be a nested dep.

Pin versions or wait until this is resolved

[Manly Mentor @manly_mentor]

Millionaire drops GOLDEN financial advice in this Interview 🎯🔥

[Abu Amir @SadiqMaunde]

Enjoy good governance abroad, support failures at home.

[Maestro @maestro__dev]

Is your app working as it should? AUTOMATE TESTING! 🥸

[Olajiire 🎭 @olajiire101]

We’re not kids anymore. Now my mom tells me her problems, and I hide mine so she doesn’t have to worry. ❤️‍🩹

[Amelia @AmeliaRodrigJan]

Making her laugh when she is in lot of pain.

[Benart @bencoderus]

@Amospikins Solid explanation 👌🏾

[Benart @bencoderus]

@Champions6619 @shredwithQpid This is not a Bicep curl, it works more of your Brachialis.

[Benart @bencoderus]

@atmoio Spot on!

[Elon Musk @elonmusk]

People giving OpenClaw root access to their entire life