wavellan

Malware URL's @ Pastebin URL's submitted:

[Spencer Pratt @spencerpratt]

If you don't vote, I don't want to hear you ever complain about any of the filth, crime, or decline in LA again. Get off your butt and VOTE, or enjoy what you get.

[wavellan @wavellan]

@spencerpratt Saca la basura!

[Elon Musk @elonmusk]

True

[Steve Hilton @SteveHiltonx]

Right now only 35% of our kids meet math standards and 47% meet English. That changes when I’m Governor.

We’re guaranteeing 100% of California students hit those standards — with real accountability for schools, great teachers rewarded, and parents back in charge.

Great kids, great future! ☀️
https://t.co/DNA2n2BBMT

[wavellan @wavellan]

@TMobile @TMobileHelp Please address the number below used to run Tech Support #scam

[wavellan @wavellan]

@18_Flashing @lillyvig Two girls one dog?

[wavellan @wavellan]

@realDonaldTrump No American citizen should face child support court action or license suspension (contractor, driver's, etc.) filed by an illegal alien. Please issue an executive order protecting citizens from these consequences. 🇺🇸 #IllegalImmigration #AmericaFirst

[Steve Hilton @SteveHiltonx]

We are desperate for change here in California and that’s exactly what I’m bringing.

Californians suffer under the highest poverty rate, highest unemployment rate, and highest cost of living because of CA Democrat policies.

All of that ends when I’m elected governor!

[Steve Hilton @SteveHiltonx]

Why are gas prices always $2.00 higher in California?

Because Democrat policies mean we ship in oil from Iraq, 7,500 miles away, instead of getting it from Kern County right here in our state.

As governor I will end this insanity so we can have $3.00 gas.

[Steve Hilton @SteveHiltonx]

The CALIFORDABLE plan:

✅$3 Gas
✅Cut your electric bills in half
✅First $100k tax free
✅No more free healthcare for illegal immigrants, lowering healthcare costs for you
✅A home you can afford to buy

It’s time to take our state back!

[Payal Radadiya @payal_radadiya]

@Cloudflare Hello @Cloudflare
It’s more than 48 hrs and infringing websites are still active.
I submitted report and emailed to their server but nothing works. Guide me.
Report IDs:
83e580a77da29134
21a4ca8ea7ce0367
fdd44a7acb94483c
db013025deb14f65
57089dbe6b4d04bd
08cbca5367395078

[Oleg Kutkov 🇺🇦 @olegkutkov]

I connected a 3.5'' floppy drive to my @Tesla, and it works.
It's nice that the Linux kernel still supports this subsystem. The system script mounts any detected disk drive (with some exceptions) as external storage for Sentry/Dashcam/media source.
It's even possible to play a single MP3 file from the diskette.
Unfortunately, formatting the diskette to exFAT fails, and it can't be used with Sentry. It's a shame.

[WarrenVsCCP | 🇺🇸🇹🇼🇺🇸 @WarrenVsCCP]

How many of you have seen this atrocity?

The invasion of Tibet by the CCP 🇨🇳!!

[wavellan @wavellan]

@TMobileHelp Thanks. I understand this is a canned response. But, sending an e-mail message to SMS isn't the correct response. This is because it was not sent via SMS. This is an e-mail.

[wavellan @wavellan]

@TMobile @TMobileHelp Please address the phone number used in @PayPal tech support SCAM.

[Aakash Gupta @aakashgupta]

Someone just poisoned the Python package that manages AI API keys for NASA, Netflix, Stripe, and NVIDIA.. 97 million downloads a month.. and a simple pip install was enough to steal everything on your machine.

The attacker picked the one package whose entire job is holding every AI credential in the organization in one place. OpenAI keys, Anthropic keys, Google keys, Amazon keys… all routed through one proxy. All compromised at once.

The poisoned version was published straight to PyPI.. no code on GitHub.. no release tag.. no review. Just a file that Python runs automatically on startup. You didn’t need to import it. You didn’t need to call it. The malware fired the second the package existed on your machine.

The attacker vibe coded it… the malware was so sloppy it crashed computers.. used so much RAM a developer noticed their machine dying and investigated. They found LiteLLM had been pulled in through a Cursor MCP plugin they didn’t even know they had.

That crash is the only reason thousands of companies aren’t fully exfiltrated right now. If the code had been cleaner nobody notices for weeks. Maybe months.

The attack chain is the part that gets worse every sentence.

TeamPCP compromised Trivy first. A security scanning tool. On March 19. LiteLLM used Trivy in its own CI pipeline… so the credentials stolen from the SECURITY product were used to hijack the AI product that holds all your other credentials.

Then they hit GitHub Actions. Then Docker Hub. Then npm. Then Open VSX. Five package ecosystems in two weeks. Each breach giving them the credentials to unlock the next one.

The payload was three stages.. harvest every SSH key, cloud token, Kubernetes secret, crypto wallet, and .env file on the machine.. deploy privileged containers across every node in the cluster.. install a persistent backdoor waiting for new instructions.

TeamPCP posted on Telegram after: “Many of your favourite security tools and open-source projects will be targeted in the months to come.. stay tuned.”

Every AI agent, copilot, and internal tool your company shipped this year runs on hundreds of packages exactly like this one… nobody chose to install LiteLLM on that developer’s machine. It came in as a dependency of a dependency of a plugin. One compromised maintainer account turned the entire trust chain into a credential harvesting operation across thousands of production environments in hours.

The companies deploying AI the fastest right now have the least visibility into what’s underneath it.

[FBI @FBI]

The #FBI recently established its first permanent office in Ecuador, strengthening cooperation with Ecuadorian law enforcement to combat transnational crime.

The office, located in the U.S. Embassy in Quito, will support joint investigations with a new unit of Ecuador’s National Police targeting drug trafficking, weapons smuggling, money laundering, and terrorism financing.

Read more at https://t.co/hFTliT0qkc.

[U.S. Senator John Fetterman @SenFettermanPA]

This is incredibly generous.

TSA agents across the country are relying on food pantries and community donations just to get by.

I remain the lone Dem to vote with my Republican colleagues to fully fund DHS and get people paid.

It should never come to this point.

[wavellan @wavellan]

@TMobile @TMobileHelp Please address the account referenced in the attached image. Account is being used to conduct tech support #fraud. Please don't respond with a canned response.

[Javier Blas @JavierBlas]

VIDEO EXPLAINER: The most important map of the Third Gulf War — the oilfields, the Strait of Hormuz, and the bypass pipelines.

Plus a look at how, two weeks into the war, Iran is still exporting lots of its oil, and most of it, via the strait.

@opinion