Quinn

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Quinn @FlashyQpt]

@tayvano_ Damn

[Quinn @FlashyQpt]

@thephysicsgirl That sucks but you're looking so much better! I hope you're able to share what you think has helped/is helping

[Quinn @FlashyQpt]

@LiveOverflow Went though this exact thing recently. Very normal very cool

[Quinn @FlashyQpt]

@SCBuergel @Wise @gnosispay @monerium Happened to me in 2019~
Thrilled to see they haven't gotten any better...

[Quinn @FlashyQpt]

@samczsun Twitter fucking sucks now. I don't know how she still manages to care.

[Quinn @FlashyQpt]

@diannahaze Brilliant

[Quinn @FlashyQpt]

@vxunderground @tomwarren Naa

[Quinn @FlashyQpt]

@deepfates Been there done that

[Prof. Eliot Jacobson @EliotJacobson]

The 7 hottest days on Earth in the last 100,000+ years all happened in the last week:

July 6 ~ 17.23°C / 63.01°F
July 7 ~ 17.20°C / 62.96°F
July 4 ~ 17.18°C / 62.93°F
July 5 ~ 17.18°C / 62.92°F
July 8 ~ 17.17°C / 62.90°F
July 10 ~ 17.12°C / 62.81°F
July 9 ~ 17.11°C / 62.79°F

[Tay 💖 @tayvano_]

thread of the day 🏆

be sure to make it to the end, there’s more than a few open questions about Prometheum’s origin and operations and corp structure that folks should def dig into more.

[Tay 💖 @tayvano_]

If you think you're are fine, you looked, blah blah. No, fuck you. Change them. Remove them. NOW.

This has already rekt Moonpay/IOTA, BadgerDAO, KyberSwap, MyAlgo & more.

The permissions are NOT what you think they are.

And the activity will NOT show in your logs.

[Quinn @FlashyQpt]

@tayvano_ Thanks

[Quinn @FlashyQpt]

@sniko_ I seem to have a 25 to 26 hour cycle, does that count?

[Quinn @FlashyQpt]

@nicksdjohnson @Wise I got banned for being involved in crypto despite not using the account for it. Back before they shortened their name

[Quinn @FlashyQpt]

@allgarbled .

[Quinn @FlashyQpt]

@nazar_ilamanov Pretty sure you're actually incentivising results, not education. Same problem school already faces

Ideally you need to get a return from the information being useful to them later on - less 0 sum, more like a mutual investment

[Quinn @FlashyQpt]

@t3dotgg It's popular

[Quinn @FlashyQpt]

@sniko_ I don't believe that's a new revelation to you