Vagelis

Full Stack Software Developer 🚀
Dyslexic | ADHDer | OSS Contributor
Working with agencies around the 🌍
#Vue #React #Astro #Strapi #Expo #Shopify #WordPress +

[npm @npmjs]

1/ To prevent supply chain attacks following the pattern of Mini Shai Hulud, we invalidated npm granular access tokens with write access that bypass 2FA. Update the stored token and rerun the workflow for your automations.

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[Vagelis @vagpapdev]

Feel free to get in touch for access to @WP_Notificator or if you have any questions related to the project.

[Vagelis @vagpapdev]

One funny contrast while building the @WP_Notificator ecosystem was constantly switching between embedded firmware work and modern mobile app development.

Especially while writing the new Matter firmware for the ESP32-C3.

The mindset difference is massive.

#ESP32 #Matter #EmbeddedSystems

[Vagelis @vagpapdev]

Working across both worlds simultaneously really changes your perspective on software engineering.

Embedded systems force discipline.

Modern app development rewards abstraction and velocity.

Building both together makes you appreciate each side a lot more.

#SoftwareEngineering #IoT #ReactNative #Matter

[Notificator Project @WP_Notificator]

Matter landed on the Notificator Project.

Turn #WordPress notifications into #Matter actions with our ESP32-C3 OS Matter firmware, Plugin, & Mobile App.

Free web installer for compatible ESP32-C3 boards coming soon.

Read more:
https://t.co/Ic0DVIZBrr

#Matter #ESP32 #MQTT #IoT

[Notificator Project @WP_Notificator]

These are some of the early Notificator devices now in testing, along with the #WordPress plugin.

Real-time notifications
No distractions
Just signal
Want access? Get in touch.

[Notificator Project @WP_Notificator]

Open Release Update

• #WordPress
• Mobile
• MQTT / IoT

Testing is now open 👇

https://t.co/ihEyCM9Wr5

[Vagelis @vagpapdev]

Just published an intro to the Notificator Project. @WP_Notificator

#WordPress plugin + Mobile app + IoT devices for real-time, scenario-based notifications.

Testing is now open. ( The service is better than the video 😂 )

https://t.co/Aml5NDQR7o

[Vercel @vercel]

We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems, impacting a limited subset of customers. Please see our security bulletin:
https://t.co/0S939n3qHC

[Stelios nikitopoulos @stenikito]

Το ρεπορτάζ έπαιξε στο δελτίο ειδήσεων της ΕΡΤ3. Αν μπορείτε, αφιερώστε λίγο χρόνο να δείτε το βίντεο. Και αν θέλετε, μοιραστείτε το. Ίσως έτσι φτάσει εκεί που πρέπει, σε ανθρώπους που μπορούν να βοηθήσουν (για το κινητό του ανθρώπου στο inbox).

[Feross @feross]

🤨 People keep asking how to protect yourself.

#1: set min-release-age=7 in .npmrc

#2: install Socket for GitHub (it's free!) to protect PRs from bad dependencies: https://t.co/D9bsRJj65R

#3: install Socket Firewall (also free!) to protect your laptop: https://t.co/u1NRD57PQ8

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.