Mohamed EL BOUDALI

Sr. Software Engineer | AI & automation | Turning data into insights, ideas into apps

[Mohamed EL BOUDALI @moelboudali]

Stopped paying 6 different vendors and moved everything to a single VPS for €11.75/month.
Here's what I gained and what I had to give up.

https://t.co/SF1469yNP8
#Vercel #Saas #VPS #Coolify #DevOps #Selfhosting

[Mohamed EL BOUDALI @moelboudali]

@Achl7i555 wach iptv to sat?

[Mohamed EL BOUDALI @moelboudali]

@lihoudii

[Mohamed EL BOUDALI @moelboudali]

Got hit by React2Shell (CVE-2025-55182) on Azure App, Next.js 15.1.7 + React 19. Here's what happened and how I fixed it.
https://t.co/Jop2CtTkqD
#NextJS #React #WebSecurity #CVE202555182 #React2Shell #Azure

[Mohamed EL BOUDALI @moelboudali]

Genuinely didn't expect this, Thanks @AnthropicAI

[Feross @feross]

🤨 People keep asking how to protect yourself.

#1: set min-release-age=7 in .npmrc

#2: install Socket for GitHub (it's free!) to protect PRs from bad dependencies: https://t.co/D9bsRJj65R

#3: install Socket Firewall (also free!) to protect your laptop: https://t.co/u1NRD57PQ8

[Chaofan Shou @Fried_rice]

Claude code source code has been leaked via a map file in their npm registry!

Code: https://t.co/jBiMoOzt8G

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Mohamed EL BOUDALI @moelboudali]

@filaliislam المصدر: بيانات وزارة العمل ومنظمة العمل الدولية — ما��س 2026

[Mohamed EL BOUDALI @moelboudali]

@filaliislam 🤣

[Mohamed EL BOUDALI @moelboudali]

@Cmoi_Fouad مشيت لتما فشهر 2 والزحام مايمكنش, والمشكل الفراشا الي عليهم الزحام كثر من صحاب المحالات

[Mohamed EL BOUDALI @moelboudali]

@Reda_ كون تشوف ديال مراكش

[Mohamed EL BOUDALI @moelboudali]

Claude is down, guess it’s finally time to touch grass… at 4 AM 🤨 #Claude #Claudedown

[Pirat_Nation 🔴 @Pirat_Nation]

Open-source game engine Godot is drowning in 'AI slop' code contributions: 'I don't know how long we can keep it up'

Many submissions contain nonsensical code changes, fabricated test results, and overly verbose descriptions typical of LLM output.

Reviewing every new contributor's PR has become extremely time-consuming and demoralizing.
Rémi Verschelde stated they may not be able to sustain the current level of manual vetting much longer.

[Mohamed EL BOUDALI @moelboudali]

another day of fixing bugs I apparently created in 2023

[flavio @flaviocopes]

TIP: add the `data-1p-ignore` attribute to your input field to disable 1Password on it ✖︎

[.NET @dotnet]

Looking to start learning C#?

This @ThePracticaDev article takes you through the basics of C#; from setting up your environment to writing code effectively and writing your first program. 📖 https://t.co/LHN0KBJSfZ

[Matt Pocock @mattpocockuk]

I've always wondered what it would be like to combine useEffect with a pattern matcher like ts-pattern.

Much easier to represent sequences of effects this way - where only one effect can run at once.

[Rapid @Rapid_API]

What's the difference between the HTTP methods PUT and PATCH?

A thread 👇

{ 1 / 5 }

[Shubham Saboo @Saboo_Shubham_]

Big News 🚨

Microsoft just launched Teams premium powered by ChatGPT at just $7/month 🤯

With ChatGPT, Teams users can generate automatic meeting notes, AI-recommended tasks, personalized meeting templates, and a lot more!!