lance
7.7K posts
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
@drochetti Even Brazilians make this mistake Replies under my Brazil buffet tweets are always "omg u should go to churrascaria" even from Brazilians You don't go to a churrascaria every day, it's too much meat!
🚨 Why Bitcoin always dumps at 10 a.m. when the U.S. market opens ? Today, Bitcoin erased 16 hours of gains in just 20 minutes after the US market opened. Since early November, BTC has dumped most of the time after US market opens. The same thing happened in Q2 and Q3. @zerohedge has been calling this out repeatedly, and he thinks Jane Street is the most likely entity doing this. When you look at the chart, the pattern is too consistent to ignore: a clean wipeout within an hour of the market opening followed by slow recovery. That’s classic high-frequency execution. And it fits their profile: • Jane Street is one of the largest high-frequency trading firms in the world. • They have the speed and liquidity to move markets for a few minutes. The behavior looks simple: 1. Dump BTC at the open. 2. Push the price into liquidity pockets. 3. Re-enter lower. 4. Repeat daily. And by doing this, they have accumulated billions in $BTC. As of now, Jane Street holds $2.5B worth of BlackRock’s IBIT ETF, their 5th largest position. This means most of the dump in BTC isn't due to macro weakness but due to manipulation by one major entity. And once these big players are done with buying, BTC will continue its upward momentum.
⚠️⚠️ Lembrem lucro bom é lucro no Bolso, aos que estão com 50%, 100% de lucro em papéis específicos pode ser boa hora para AOS POUCOS começar realocar e rebalancear a carteira… Não acho que existam motivos para uma forte queda na Bolsa no curtíssimo prazo, mas eu prefiro ser cauteloso. No geral gringo espera a virada do ano para começar vender papéis especulativos com lucro, pois aí só pagam imposto sobre ganhos no outro ano, nesse caso 2027.
Birth rates are plummeting in a lot of countries. Population collapse is the greatest threat to civilization. Change needs to happen to save humanity.
