Mosebolatan

Goofy Always....😈 | backend engineer | Ai Engineer

[Mosebolatan @iyiola_gmore]

🦷

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft Threat Intelligence is tracking active Mini Shai-Hulud npm supply chain attacks in which a threat actor compromised trusted maintainer accounts to distribute credential-stealing malware.

Compromised packages (confirmed malicious) include:
- [email protected]
- [email protected]
- [email protected]
- [email protected]
- qlik/[email protected]
- cacheable/memory, /utils, /net
- 17+ servicetitan/* packages (eslint-config, anvil-themes, table, form, log-service, etc.)

In this attack, a malicious preinstall hook launches an obfuscated dropper (setup.mjs) that downloads a Bun binary from GitHub and executes a credential-stealing payload, either Math_Symbol.js or Math_Init.js.

The payload is a Mini Shai-Hulud variant, a self-propagating npm supply-chain malware family. It harvests npm, GitHub, cloud and continuous integration (CI) credentials, exfiltrates collected secrets, and uses stolen publishing access to inject itself into package tarballs, increment their versions and republish the compromised releases.

Microsoft observed the same pattern across all affected packages, suggesting a single actor using multiple stolen tokens.

Microsoft Defender for Endpoint customers should act on these alerts: “Trojan:npm/MalBun.A”

[Mosebolatan @iyiola_gmore]

Damnnnnnnn crazy stuff

[Socket @SocketSecurity]

🚨 Update: Watching this npm worm propagate in real time, we’re now tracking 2,234 affected package artifacts across 444 unique packages, and it’s still spreading.

Average detection time: 5 min and 18 seconds after publication. Our campaign page includes all packages/versions.

[Mosebolatan @iyiola_gmore]

@Shileolaibrahim @WhatsApp Lmao.. you be accomplice, na your blue print I use

[Mosebolatan @iyiola_gmore]

Is @WhatsApp real at all? How can you ban my number for doing nothing?

This is crazy!!!!!

[Mosebolatan @iyiola_gmore]

@Zxizou @WhatsApp I no even use whatsapp like that.

[Mosebolatan @iyiola_gmore]

@Shileolaibrahim @WhatsApp You dey mad niiii……

If na app wey I de use frequently, I for de wonder weytin de go on. But nothing at all, I just say make I open am, na him I see say dem don ban my account

[Mosebolatan @iyiola_gmore]

I think deepseek is actually the real.. Deep

[Saanvi🌺 @Saanvi_dhillon]

AI models often disagree with each other.

Same question.

Four completely different answers. 💀

[Mosebolatan @iyiola_gmore]

They listened to @akinkunmi 🤣🤣😭

[International Cyber Digest @IntCyberDigest]

Claude wiped an entire database. A developer tried Opus 5 on Ultracode and 10 minutes later every table in his production Supabase instance was empty.

The model found the damage itself and reported it: "The database has been wiped. This is my fault and I need to tell you immediately."

[David Sacks @DavidSacks]

Anthropic maintains that it is entitled to train for free on all the world’s output, even if the author objects. But if a competitor trains on Anthropic’s output after paying for it, that is IP theft. The hypocrisy is breathtaking.

[Mosebolatan @iyiola_gmore]

Need to get to this level of building frontier intelligence man.

[Kai @real_kai42]

这次真的只做了微小的贡献
希望 K4 能参与更多 🎉

[Mosebolatan @iyiola_gmore]

The internet keeps giving 🤲🤲🤲

[GrEarl @Iamwonderingif]

https://t.co/mJrgW5PZWk
世界最速量子化今してます！

[Mosebolatan @iyiola_gmore]

Please find love at home, what’s this nonsense in this thread😭😭.

[Marvel @youfoundmarvel]

Petition to ban Snapchat 💔

[Mosebolatan @iyiola_gmore]

@IamAroke “Ability to accept all changes” and skill to enable “Bypass all”

[Mosebolatan @iyiola_gmore]

You just de use our babe template de go.

[HYPETRIBE @hypetribeng]

🚨TYLA

“THAT GIRL”
OFF A*POP ALBUM 💿

Thoughts ??

[Mosebolatan @iyiola_gmore]

I am not really sure, y’all won’t genuinely open source good models.

[Sam Altman @sama]

i want the US to win in AI both in open source and proprietary models, and i am glad to see this

[Ahmad @TheAhmadOsman]

Fable 5 wasn't even available for majority of time Kimi K3 was being trained, any accusations of distillations CANNOT be true

[bandito💜 | comfort food @ogheneyxle]

seems like you understand it fine o

[Chris @ChrisGPT]

Kimi K3 was already in internal evaluation by April/May, before Fable 5 had been available long enough to be a plausibly distilled. I’ll wait for the evidence from the USG if they’ll publish it.

However Kimi already outperformed Fable on BrowserComp, so if K3.1 beats Fable 5 on coding benchmarks, are people going to claim it distilled Fable 6? Obviously it’s not only distillation here.

Saying “mythos” would have made a lot more sense but fable ?

[Mosebolatan @iyiola_gmore]

This is petty and I love it😭😭

[Mosebolatan @iyiola_gmore]

Where can I watch Odyssey on IMax screen in Lagos?

How much please 😭