Codedgar

Frontend Design Engineer · DX-focused Design systems, performance & frontend architecture · Tech Lead ▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄▀▄ Tinkerer, maker

[Codedgar @codedgar_dev]

@coin_analyst_ @vboykis Mostly open-source templates, library defaults, and the middle of best and worst design advice in existence. Like when people used Bootstrap for everything

[Codedgar @codedgar_dev]

@capybaraonchain @romuloXcordova @VenteVenezuela ??? cuando usaban pegasus???

su fuerza es bruta, no técnica. Y lo sé porque lo he visto cerquita, amenazan y asustan y solo usan accesos que les dan otros cuerpos gubernamentales

[Codedgar @codedgar_dev]

@capybaraonchain @romuloXcordova @VenteVenezuela sobreestimas al 6bin durísimo, ni sabrán que es un deepseek

[Codedgar @codedgar_dev]

@midudev del dicho al hecho hay mucho trecho! hay que ver que tantas apps cubre, o que tan estable es

[Codedgar @codedgar_dev]

si ustedes con el primero no se hicieron un aggregator para detectar estas cosas y arreglarlas con un click you’re ngmi

[The Hacker News @TheHackersNews]

‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws.

New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance.

Full details → https://t.co/YQV0MCJqAp

[Codedgar @codedgar_dev]

@shcallaway can’t scroll the technology select of the homepage on iOS 😞

[Codedgar @codedgar_dev]

dios mío, no me creo que sea así como se oficializa HLX por parte de Valve jajajaja

[‎Gabe Follower @gabefollower]

Mike Morasky, a developer from Valve, directly mentioned HLX (rumored to be Half-Life 3) during his Q&A session.

[Codedgar @codedgar_dev]

@AsdrubalCodes me molesta que su chat no comparta todo el transcript cuando se lo pides😞 tiene que alguien copiarlo y pasártelo

[Codedgar @codedgar_dev]

claudio hackea la switch 2 make no mistakes

[chasm @chasmmmmmmmmmmm]

THE SWITCH 2 HAS BEEN JAILBROKEN BY AI 🚨

pepsipu just released ns2jb, the first known jailbreak for the Switch 2. It's software-only and works on the latest firmware, 23.0.1.

The craziest part is that Codex did most of the hacking. He hooked both Switches up so the AI could send controller inputs, watch the screen, and even press the power button with an Amazon smart light switch whenever the console crashed. His prompt was literally "set a goal to jailbreak the switch 2. make no mistakes".

The way in was a bug in SmileBASIC, a Switch 1 game, which it then chained into Nintendo's own file system service.

[Codedgar @codedgar_dev]

@nanull0x argentina el único país de data open source 😞

[Codedgar @codedgar_dev]

@imzachfarr @markgadala not safe either

[Socket @SocketSecurity]

🚨 LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised.

Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools.

[Codedgar @codedgar_dev]

Parece que los de JS tampoco se salvan

[Mark Gadala-Maria @markgadala]

🚨 BREAKING: Node.js just dropped its OWN security bombshell.

4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers.

→ 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity.

→ REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely.

→ TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions.

→ Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to.

→ THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates.

→ RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches.

→ PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers.

PHP AND Node.js both facing major security disclosures on the SAME DAY.

If you run a website or application, TODAY is the day to check your servers.

And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated.

Don't be the last one to patch.

[Codedgar @codedgar_dev]

@MartinPulitano felicidades capo te lo merecías al 100

[Codedgar @codedgar_dev]

@ANG3LINCAM0 he right tho

[Codedgar @codedgar_dev]

@RoniBandini hay repo? 👀

[Codedgar @codedgar_dev]

te quiero mucho cloudflare

[Brayden @BraydenWilmoth]

One-click mitigation for php2shell vulnerability:

If you have Cloudflare in front of your PHP website, please login to the dashboard and click this button to make sure you are protected.

https://t.co/KywdLV8TK7

This reduces your risk but doesn't fix the vulnerabilities in PHP. We recommend updating PHP to a patched version.

[Codedgar @codedgar_dev]

@fachebits yo estoy en esa y de paso me saco todas las suscripciones horribles

[Codedgar @codedgar_dev]

alguien no va a tener que pagar streaming mas nunca! (yo)

[Codedgar @codedgar_dev]

@raunofreiberg this is so peak i had no idea this existed! Updating to that on all my sites rn

[Codedgar @codedgar_dev]

@_tokuninai impresionante lol yo le pregunto a claude de cybersec y piracy y me llora de una

[Codedgar @codedgar_dev]

toca preparase hoy muchachos. ya hay ataques de la vulnerabilidad de PHP

[UwU Underground @uwu_underground]

Already seeing these in the logs:

User-Agent: php2shell-109619
Content-Type: multipart/form-data; boundary=B7kQpoc619

User-Agent: php2shell-109618
multipart/form-data; boundary=B7kQpoc618