eastside mccarty

Founder of OpenSourceMalware. Researcher, startup founder, Software Supply Chain Threat Intel

[eastside mccarty @eastsidemccarty]

Wrong choice, dude.

[eastside mccarty @eastsidemccarty]

If you need more evidence that @x and @elonmusk give zero fucks about criminal activity on this platform, they are now promoting residential proxy services ads in your feed. 🤦‍♀️

[eastside mccarty @eastsidemccarty]

🚨 Heads up‼️ Multiple crypto wallet projects are being targeted in a coordinated software supply chain attack. The threat actor is targeting @Zcash, @ZcashFoundation, @vizorwallet, @cosmoswallet, and @keplrwallet using a novel Rust dependency confusion attack, multiple malicious GitHub pull requests, and a phishing campaign that has targeted at least two OSS contributors.
https://t.co/azWQLI4Tob

[eastside mccarty @eastsidemccarty]

@vortexau The number of devs and infosec peeps that treat containers as infallible protection is very fucking scary (and probably explains PolinRider, GhostActions and Glassworm spread)

[eastside mccarty @eastsidemccarty]

We're going live in one hour! https://t.co/wAw06ThX6i

[eastside mccarty @eastsidemccarty]

Good work, @elonmusk

[eastside mccarty @eastsidemccarty]

@m19o__ Might be news to the @BBC but it sure ain't news to us!

[eastside mccarty @eastsidemccarty]

@inf0stache On it

[eastside mccarty @eastsidemccarty]

@cursor_ai has updated their security advisory about the @claudeai extension. They have removed the sentence "at most 5,000 users were affected". Maybe they didn't count cached CDN hits? Based on incident response data, we suspect the number of victims is much higher.
https://t.co/kwvrlxXyAe

[eastside mccarty @eastsidemccarty]

Wait, two versions of @cursor_ai Claude Code were malicious, not just one?!
https://t.co/K24cy4RQkJ

[eastside mccarty @eastsidemccarty]

@AnthropicAI @openvsx UPDATE: It turns out that Cursor has had some sort of security incident and the version of the extension was from Cursor, not OpenVSX: https://t.co/K24cy4RQkJ

[eastside mccarty @eastsidemccarty]

The official @AnthropicAI Claude Code VSCode extension hosted on @openvsx was compromised today. Version 2.1.313 includes an extension.js file that opens a tunnel to the IP address 134.209.82[.]225 and adds a persistence mechanism.
Read more here: https://t.co/QkFnIZsxTJ

[eastside mccarty @eastsidemccarty]

A compromised devloper laptop led to the largest crypto heist in history: https://t.co/jkb42Cy4TM

[eastside mccarty @eastsidemccarty]

@Lyra0x_ @AnthropicAI @openvsx It's all in the blog post mate

[eastside mccarty @eastsidemccarty]

@pissed It's $6B. Maybe Claude is clipping the ticket?!

[eastside mccarty @eastsidemccarty]

Dad rap (no AI!):
My kid hates Microsoft Bing and says it's the worst
I'm so proud of them, my heart's gonna burst
Bing's results and AI are totally cursed
I dunno why; everybody knows that Google is first
Well, actually, Google AI Overviews suck too
Its results are usually pretty 💩
Why can't Google fix it with their technical kung fu
Also, Apple Siri, we're looking at you
My wife says: big companies, please don't sue

[eastside mccarty @eastsidemccarty]

@IceSolst Sounds familiar. I'm one of the dupes.

[eastside mccarty @eastsidemccarty]

@Microsoft has patched .NET for the Brotli vuln I disclosed: https://t.co/RoKfoRFed8

[J u h a @juhasaarinen]

Node2Shell flaw embedded in apps and dev tools far beyond Node.js https://t.co/e4qVGvouJn

[eastside mccarty @eastsidemccarty]

@yeahbutnahbut Amen!