CRYPTOSLO
14.8K posts

CRYPTOSLO
@BitcoinSLO
Class of 2017 | E.E.T/MISM Data Scientist/Agentic Engineer









‼️🚨 BREAKING: A new npm supply-chain attack uses a dead-man's switch. The payload plants a watcher on your machine that nukes your home directory the second you revoke the GitHub token it stole from you. The compromise happened today, across 42 official tanstack npm packages, 84 malicious versions in total. tanstack/react-router alone pulls more than 12 million weekly downloads. The attacker forked TanStack's repository and pushed a single hidden commit. From there, they tricked TanStack's own release system into signing the malicious packages as if they were the real thing. To npm, and to anyone checking the cryptographic proof of origin (SLSA provenance), the poisoned versions looked 100% legitimate. Maintainer Tanner Linsley confirmed the whole team had 2FA enabled. It didn't matter. This is the first documented npm worm in history that ships with a valid, signed certificate of authenticity, the same one defenders rely on to know a package wasn't tampered with.









This is one of the most disappointing rabbit holes we have ever seen with our food… Rao’s was one of the most beloved clean ingredient staples in every health conscious consumers kitchen. Then they were bought out by Campbell’s in 2024… In 2025 Campbell’s also bought 49% of La Regina, who produces Rao’s tomato‑based sauces. The ingredients stayed the same on the back. But customers are now claiming Rao’s is now more watery, tangier, more acidic, less tomato‑forward, and sometimes “cheap store brand” quality. Loyal customers say the sauce tastes worse, look more orange, have more chunks, or taste more heavily spiced and bitter. Then people flipped over the jar… ”Olive Oil” not “Extra Virgin.” This means they’re likely using a more processed, lower‑grade olive oil (or a blend) rather than a cold‑pressed EVOO. It’s also not organic, meaning the inputs are undoubtedly conventionally farmed. Campbell’s says the ingredient list hasn’t changed… Consumers point out the ratios could be different. The sourcing quality could be worse. Whatever it is, many believe something is up. We’ve seen a long-time pattern of healthy brands achieving the velocity to be acquired from a Big Food company and then just not being the same as it used to be. Shop local, buy independent, support your farmers.












