Dear @RazorpayCare@Razorpay - I'm locked out of my account after changing the email address. And reaching support requires me to login first. Kindly help
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.
This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.
Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:
• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence
If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
Nice to hear this development Vidit. In my app development journey I've experienced that system design and decision making that comes with it is the hardest part. And it's not about taste as many think, it's more about vision, specially from zero to one.
It's a hard problem to solve. Best luck to you.
(Also, I've expertise in cloud infra in case if you need help)
@ishaan_jaff Good and timely response Ishaan. You got this.
Just curious, did you have the infrastructure to flag it if an external user did not catch it?
If not, what's the plan?
We just released Music Marketplace in ElevenCreative.
To celebrate, we’re giving away 5,000 free credits so you can create and publish your first track.
For the next 6 hours: retweet + follow @ElevenCreative and we’ll DM you the credits (must follow).
I spent time in Shenzhen last year and when I saw Merz come back from China saying Germans need to work more I immediately knew what broke his brain because I lived the exact same cognitive shock
my first week in Huaqiangbei I burned through 4 prototype iterations of a motor controller board for less than a thousand bucks total, back home a friend was working on something similar and spent over 12 thousand for a single revision that took almost two months to arrive
when you live that contrast in your own hands with your own project something permanently shifts in how you see the world and it goes way deeper than speed & cost
what Shenzhen actually built is a collective learning organism, imagine 20 PCB fabs 15 injection mold shops 30 component distributors and a hundred firmware freelancers all within a 2km radius, looks insanely redundant from the outside until you realize redundancy is actually information density in disguise
I watched this firsthand with an injection mold supplier I was working with, this guy had seen a hundred founders iterate similar thermal designs over 6 months so he proactively modified his tooling before I even opened my mouth, he knew what I needed before I knew what I needed, the intelligence lives in the relationships between the nodes and it compounds daily
the west thinks about manufacturing as a cost center you optimize by centralizing…
China accidentally built a distributed neural network of manufacturing intelligence where knowledge diffuses horizontally across thousands of agents faster than any single western company can process internally
so when Merz comes back and says we need to work a bit more I think he saw the problem but COMPLETELY misdiagnosed the solution, telling Germans to work harder is like telling a horse to gallop faster when the other side built a combustion engine
the gap is ARCHITECTURAL
it’s ecosystem density, you need a custom connector in Shenzhen you walk 200 meters, in Munich you send an email and wait 3 weeks
it’s iteration speed, parallel search vs sequential optimization at the system level, it’s risk tolerance, Chinese founders ship something broken on Monday fix it Tuesday ship again Wednesday while European companies are still in the approval phase for the pilot program of the feasibility study…
and Merz only saw the surface, what he missed is the tier 2 cities like Hefei Chengdu Wuhan replicating the Shenzhen model at scale right now
BYD going from irrelevant to outselling every european automaker combined in roughly 5 years, Huawei building its own 7nm chip under maximum sanctions when every analyst said it was physically impossible & behind all of that a government that treats advanced manufacturing as an existential national priority while europe debates whether AI needs another ethics committee
I think what we’re watching is the most asymmetric economic competition in modern history and most western leaders are still framing it as a productivity problem when it’s actually an ontological one
Europe & America are optimizing variables that China stopped tracking years ago meanwhile China is compounding on dimensions the west has no framework to even measure
Merz at least had the courage to name
it out loud and I respect that genuinely but working a bit more inside a broken architecture just means you arrive at the wrong destination slightly faster
@bsomaia Good thread. AI application layer is going to have huge compitition.
Everyone will start at application level, few will build differentiation at technical level, those will create generational businesses.
@dharmeshba Hi Dharmesh, let me know if you need any AWS and devops help. I do it really well, more @ https://t.co/Orzbh0pueF
Best luck with this one. Have been reading India notes for many months, this feels like right next step.