kmcodes

Cyber Security Researcher.

Taichi Practitioner ☯️

[kmcodes @kmcodes_dev]

@elonmusk @AnthropicAI @SpaceX We need more Tech Posts on X

[kmcodes @kmcodes_dev]

@github A malicious VS Code extension compromised a GitHub employee device.

These extensions run with full access, they can read cloned internal repos and quietly exfiltrate code.

Tip: before installing, verify publisher, read recent reviews, and review permissions.

[kmcodes @kmcodes_dev]

@github Malicious VS Code extension compromised a GitHub employee device.

These extensions run with full access, they can read cloned internal repos and quietly exfiltrate code.

Tip: before installing, verify publisher, read recent reviews, and review permissions.

[kmcodes @kmcodes_dev]

@grafana Not a GitHub bug.

They used a risky pull_request_target workflow that ran with high privileges. A malicious PR exploited it to steal a token and download private code (classic "Pwn Request").

Fix: Avoid unsafe pull_request_target, never run untrusted code, Audit your CI/CD!

[kmcodes @kmcodes_dev]

There’s no decentralization without security

[kmcodes @kmcodes_dev]

@PippaOona Interesting first the indulgence, then the loss of balance followed by the attack

[Programming Wisdom @CodeWisdom]

"The art of debugging is figuring out what you really told your program to do rather than what you thought you told it to do." – Andrew Singer

[kmcodes @kmcodes_dev]

@NathanHeadPhoto 3. avax ?

[kmcodes @kmcodes_dev]

@PippaOona “Awaiting” for your e book 😁

[kmcodes @kmcodes_dev]

@PippaOona @SiriusBShaman Interesting, where can one learn more about this?

[kmcodes @kmcodes_dev]

@laminembackee You either program or get programmed

[kmcodes @kmcodes_dev]

@SoulLight777 Precisely

[kmcodes @kmcodes_dev]

@PippaOona True, Nutrients are frequencies

[kmcodes @kmcodes_dev]

@PippaOona @SiriusBShaman Like an outer reflection of our inner “shadows”?

[kmcodes @kmcodes_dev]

@PippaOona interesting, like memories replaying

[kmcodes @kmcodes_dev]

@lukebelmar Fast to go fast

[kmcodes @kmcodes_dev]

@BatsouElef Yes, It's about understanding

[kmcodes @kmcodes_dev]

@ZssBecker Worldwide Karma

[kmcodes @kmcodes_dev]

@m1guelpf Majin bu

[kmcodes @kmcodes_dev]

@takegreenpill @elonmusk Having the chance to interact with a civilization slightly “advanced” than ours could answer all of this questions