José Rosas

[José Rosas @monderred]

@ctatedev If python and js has a kid...

[José Rosas @monderred]

@aboutmonsters ja justo me salió este vid en mi feed de yt (aún no lo he visto) https://t.co/fjzBOEXel4

[dax @thdxr]

remember how when we were growing up wall street was the bad guy and everyone hated them and every movie had them as the villain

that's tech now

[tacosdegerber @Bbybadgirl4]

Amigos de todas partes del mundo espero me puedan leer soy de México y quiero contar que la segunda barrera de coral más grande del mundo está corriendo peligro gracias a la empresa royal caribean quieren destruir mahahual que está en Quintana Roo México 🇲🇽

[Casey Muratori @cmuratori]

I 100% support this petition.

[Jassan @jassandev]

Petition for the Stand Up @primeagen @teej_dv @trashh_dev @cmuratori to get @tsoding on the podcast. He is genuinely a super cool dude and a cracked programmer. Would be an instant classic.

[José Rosas @monderred]

@Anaya_sharma876

[José Rosas @monderred]

@sudobunni 🧠 > 🤖

[Política Básica @Politica_Basica]

@GPMorenaCdMex Ojalá como utilizan al Ajolote para el marketing, cuidaran su habitat y pusieran orden en Xochimilco.

[Rohan Mukherjee @roerohan]

400+ npm and pypi packages were affected
Full list here: https://t.co/iX4XptJpx5

[Socket @SocketSecurity]

🚨 UPDATE: Mini Shai-Hulud has crossed from @npmjs into @pypi and is still spreading.

Newly confirmed compromised artifacts:

@​opensearch-project/opensearch: 3.5.3, 3.6.2, 3.7.0, 3.8.0 (1.3M weekly downloads)

mistralai: 2.4.6 on PyPI

guardrails-ai: 0.10.1 on PyPI

additional @​squawk/* packages on npm

guardrails-ai 0.10.1 executes malicious code on import. On Linux, it downloads git-tanstack[.]com/transformers.​pyz, writes it to /tmp/transformers.​pyz, and runs it with python3 without integrity verification.

The git-tanstack.​com domain displayed a message signed “With Love TeamPCP,” along with: “We've been online over 2 hours now stealing creds
Regardless I just came to say hello :^)”

The page also linked to a YouTube video and you can probably guess which one.

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: A new npm supply-chain attack uses a dead-man's switch. The payload plants a watcher on your machine that nukes your home directory the second you revoke the GitHub token it stole from you.

The compromise happened today, across 42 official tanstack npm packages, 84 malicious versions in total. tanstack/react-router alone pulls more than 12 million weekly downloads.

The attacker forked TanStack's repository and pushed a single hidden commit. From there, they tricked TanStack's own release system into signing the malicious packages as if they were the real thing. To npm, and to anyone checking the cryptographic proof of origin (SLSA provenance), the poisoned versions looked 100% legitimate.

Maintainer Tanner Linsley confirmed the whole team had 2FA enabled. It didn't matter. This is the first documented npm worm in history that ships with a valid, signed certificate of authenticity, the same one defenders rely on to know a package wasn't tampered with.

[José Rosas @monderred]

@plainionist Sorry friend your take is nonesense:
https://t.co/tDoGjI7cMt

[TonyIsHere4You @TonyIsHere4You]

The thing that eventually destroys the US economy is the fact that our financial system has been restructured to continually transfer wealth from productive income workers to non-productive financial asset owners. It specifically and by design punishes the productive.

[José Rosas @monderred]

@spicey_lemonade We do know how they work, how they encode spit out used to be the question check this out https://t.co/6EAeQMInXs

[José Rosas @monderred]

@BattleJeff1 @WWitchfinder @dissidentwest The crazy part is you can actually ask an LLM why is not conscious LOL

[José Rosas @monderred]

@cgarciae88 https://t.co/6EAeQMInXs

If you can't recognize reality you can't be conscious

[Is this a 3D model? @IsThisA3DModel]

Blender has taken a principled stance and is sacrificing future donations from Anthropic to reaffirms their stance that they are supportive of artists and creators

This is very admirable and we encourage all of you to donate to Blender to show your support and appreciation 🫖

[José Rosas @monderred]

@gabHernandez285 @techNmak If you do not have any background in molecular biology how do you know the "simulation" is accurate, share your project, it would be cool to check it out

[Andrej Karpathy @karpathy]

This is the the quote I've been citing a lot recently.