Simulation Complete. Boss defeated in 3.82 seconds.
Fellow Endministrators, report to @AKEndfield and get your rewards in the game!
#ArknightsEndfield#Endfield#ZerothDirective
Download Arknights: Endfield by clicking on the picture below https://t.co/8Z9WOB1LV7
New Limited Time Game Mode: ALL RANDOM ONE SITE // #VALORANT
• Random Agents
• You're assigned a new random Agent every round—no duplicates per team
• All Agents are available regardless of ownership
• Single Site
• Each round activates one bomb site with barriers blocking unused areas of the map
• The active site randomizes each round
• Active site is revealed during the buy phase
• Available Maps
• Abyss, Ascent, Breeze, Corrode, Pearl, Icebox, Sunset, Split
• Abilities
• Full ability charges granted each round at no cost
• Abilities recharge throughout the round
• Ultimate Orbs
• Start each round at 0% ultimate charge
• Ultimate Orbs are placed around the map and grant 50% ultimate charge when captured
• Kills grant 50% ultimate charge
• Killed players drop Ground Orbs containing their accumulated charge
• Loadouts
• No economy—select your loadout each round
• Weapon offerings escalate through stages as the match progresses
⚠️NPM MALWARE ALERT:
More than 300 npm packages contain a fake Bun runtime.
These packages imported a preinstall: node setup_bun.js, and an obfuscated bun_environment.js.
It runs a script that:
- Downloads and executes TruffleHog, a legitimate secret scanner
- Searches host systems for tokens and cloud credentials
- Validates discovered developer and CI credentials
- Creates unauthorized GitHub Actions workflows within repositories
- Exfiltrates sensitive data to a hardcoded webhook endpoint
- It looks for environment variables such as GITHUB_TOKEN, NPM_TOKEN, AWS_ACCESS_KEY_ID, and AWS_SECRET_ACCESS_KEY.
Since it's a worm then it replicates itself.
How to know if you've been infected?
- Check if you have new GitHub repos on your profile with the description: "Sha1-Hulud: The Second Coming."
- Check your npm packages if they contain `bun_environment.js.`.
Let's spread this!
Eu tomei um tapa assim na cara uma vez pelo simples fato de abraçar meu amigo no ponto de ônibus pq tava frio e ele tava sem casaco. Em 2021 esse amigo e o namorado foram assassinados por pura homofobia. A régua é diferente pra nós LGBTQIAPN+…