{ jhovanny: "Martínez" }

Full Stack Developer. Ávido lector de la Wikipedia.

[DuckDuckGo @DuckDuckGo]

Merlin, you have our full support.

If we sent you a DuckDuckGo jersey, would you wear it (after the World Cup, of course)?

Internet, do your thing. 🙏

[El Programador Senior @5eniorDeveloper]

Amigos de la CDMX, recuerden seguir estos pasos en cuando suena la alarma sismica:

1. Mantén la calma
2. git add .
3. git commit -m "tenemos sismo"
4. git push -f origin main
5. Busca un lugar seguro

[Leo Arriaga @Radiohen]

Otra vez se cruzaron los canales

[NASA @NASA]

Liftoff.

The Artemis II mission launched from @NASAKennedy at 6:35pm ET (2235 UTC), propelling four astronauts on a journey around the Moon.

Artemis II will pave the way for future Moon landings, as well as the next giant leap — astronauts on Mars.

[Mandiant (part of Google Cloud) @Mandiant]

Google Threat Intelligence Group is tracking an active supply chain attack 🔎

North Korea-nexus actor UNC1069 compromised the "axios" NPM package (v1.14.1 & 0.30.4), deploying the WAVESHAPER.V2 backdoor across Windows, macOS, and Linux.

Learn more: https://t.co/pII35aPpRA

[Vercel Developers @vercel_dev]

The Vercel security and compute teams have conducted an investigation into the malicious takeover of the 𝚊𝚡𝚒𝚘𝚜@𝟷.𝟷𝟺.𝟷 npm package.

• We’ve blocked outgoing access from our build infrastructure to the Command & Control hostname 𝚜𝚏𝚛𝚌𝚕𝚊𝚔.𝚌𝚘𝚖.
• The malicious version of the package has been blocked and unpublished from npm.
• Vercel’s own infrastructure and applications have been unaffected.
• We recommend checking your supply chain for exposure.

For more information, read the full advisory ↓
https://t.co/o394nzLlCw

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Fernando Herrera @Fernando_Her85]

Gente, revisen y estén pendientes del desarrollo de este problema.

Axios es súper popular, y esto puede ser bastante serio.

[{ jhovanny: "Martínez" } @jovaslink]

@FCabray @grok ponle bikini al hombre de chinos

[Juan De la torre - Código Con Juan @codigoconjuan]

Es el #DíaDelProgramador
Celebramos cada línea que construye, cada error que enseña, cada idea que toma forma en código.
Feliz día, dev

[Tláloc ☁☔☁ @SoyTlaloc]

Quien los entiende?

[Alejandro Gaitán | 🏀 @alejandroggo]

Si ha sido tu último baile, gracias @Al_Horford. Por años de hacernos feliz, de dejarte la vida por una camiseta y por sentir el verde como piel propia.

Si vuelves otro año, puertas abiertas.
Y ojalá el #42 en el techo.

[Boston Celtics @celtics]

Onto the next 👏

[Boston Celtics @celtics]

#CelticsWin

[Boston Celtics @celtics]

LET'S GO CELTICS 🗣️

[Simpsonito @SoySimpsonito]

¡Ya estoy harto del #DiaDelNiño ! ¡Foto tras foto de ustedes de niños feos, feos en sus redes sociales!

#FelizDiaDelNiño

[Boston Celtics @celtics]

#CelticsWin

[Celtics Junkies @Celtics_Junkies]

RETWEET IF YOU LOVE AL HORFORD

[Alexa Zuart @soymuynecia]

La mente crea historias que tal vez jamás se harán realidad, pero mientras ahí está uno como pendejo preocupándose de cosas que ni al caso porque todo se trata de la percepción a través de pinches traumas que uno tiene nomás porque creció en los 90 y el chupacabras andaba suelto.