Angehefteter Tweet
Fran(boesa)
4.3K posts
Fran(boesa) retweetet
Fran(boesa) retweetet
gays nunca resistem a uma mulher mais velha que serve cunt isso ta na genética gay
puto reacts@putoreacts
gays españoles alabando a la virgen maria
Português
Fran(boesa) retweetet
eu vendo a gameplay do alanzoka jogando jogos que sempre quis jogar
Lancesico 🇱🇨@Bornakang
His greed really sickens me
Português
Fran(boesa) retweetet
Fran(boesa) retweetet
Fran(boesa) retweetet
Fran(boesa) retweetet
Fran(boesa) retweetet
não gosto de primeiro de abril porque eu caio em todas as pegadinhas
já fiquei feliz e triste tantas vezes hoje e era tudo mentira
Português
Fran(boesa) retweetet
me trying to find the HDMI port on my TV
arman@SURVlVALHORROR
this is one of the best posters i’ve seen in a very long time btw
English
Fran(boesa) retweetet
Fran(boesa) retweetet
eu quando um filme de mais de 20 anos atrás ainda me faz feliz quando eu vejo qualquer coisinha sobre como se fosse a primeira vez
Português
Fran(boesa) retweetet
Fran(boesa) retweetet
Fran(boesa) retweetet
pq um homem se comportando igual o demônio ninguém ia reparar na diferença
Margaret Meloni🇦🇷🇧🇷🌷@margaretmelonii
Por que, na esmagadora maioria dos filmes de possessão, a possuída sempre é uma mulher?
Português
Fran(boesa) retweetet
the older i get the more i realise happiness is quiet mornings, a clean space, early nights, a safe home and people who don’t drain my energy.
ᅠ ᅠ@greenvibe
English
Fran(boesa) retweetet
Fran(boesa) retweetet
Fran(boesa) retweetet
“you changed my life”
movie: “i’m literally just a movie”
English
Fran(boesa) retweetet
Fran(boesa) retweetet
This is how the Axios's Supply Chain Attack happened
- Lead maintainer's npm account was hacked
- Hacker obtained the npm access token
- Changed registered mail to `ifstap@proton.me`
- Published directly via CLI, bypassing CI/CD checks
- Throwaway account pre-staged attack (18h prior)
- plain-crypto-js@4.2.0 used as a clean decoy
- plain-crypto-js@4.2.1 → actual malicious payload
- Triggered via npm postinstall hook
- Installed cross-platform RAT:
- Connected to C2 → sfrclak.com:8000
- Self-destructed after execution
Feross@feross
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
English