CAL.

Today is another package-lock.json appreciation day! - Make sure you always commit your project with the package-lock.json file. It is the ONLY version locking enforcement mechanism. - Use npm ci instead of npm install. The first one will work ONLY if package-lock.json exists. - If you need to update or pull new packages, use the --min-release-age flag (available since npm v11.10.0) to make sure you only install updates, which are at least 7 days old: npm install --min-release-age=7 Or hardcode this setting into your .npmrc file: min-release-age=7 There will be more malicious updates to popular npm packages in the future, driven by supply chain attacks. It's just the beginning. Thankfully, they will be caught in the first 24 hours. The npm ecosystem is broken by design. Adapt and act accordingly. Stay safe out there!

one day you just wake up and decide you won't drown in it anymore

@chaoswatching Wah boleh banget kalau adikmu bersedia. Saya DM kuesionernya ya?

@calaptrvs Ada my brotherrr, mau gak

Halo teman-teman. Di sini apakah ada yang: 1. mahasiswa S1 aktif, 2. umur 18-25 tahun, 3. universitas di Jawa Tengah, Jawa Timur, Jakarta, Yogya, atau Banten, 4. tertarik isi kuesioner? Saya lagi bantu teman cari responden. Barangkali ada, boleh reply ya. Thank you.

This week in security: - LiteLLM, backdoored release exfiltrating secrets - Axios, supply chain malware via dependency - Railway, CDN caching leaked user data - OpenAI Codex, command injection via GitHub branch names - Mercor 1TB data leak - Delve, data leak + compliance risk infra is the attack surface now

Where they ended up is cool and all but let's not forget the most important area on the graph

Untuk konteks, kuesionernya tentang awareness seputar digital carbon footprint ya.

Non-moots juga boleh. RTs are appreciated.

@ccanddu Asek, saya DM kuesionernya yak?

@calaptrvs Guweh cal

@DainsleifC6 @eyulawrence Sorry baru lihat reply-an—. Kuesionernya tentang awareness Digital Carbon Footprint. Tertarik isi kah?

@eyulawrence @calaptrvs waktunya kamu bersinar @calaptrvs

@DainsleifC6 NGAKAK BARU LIHAT, thank you banget, Fictor.

AYO DEDEK DEDEK GEMES BANTUIN TEMEN AKU ISI KUISIONERR HURAH HURAH HURAAAHHH yang bantu semoga guling dan bantalnya adem dan rezekinya lancar aamiin.

@S4MBUCCI Maaf baru balas, baru buka rep—. Saya DM ya kuesionernya?

@calaptrvs aku bisaa

@paadishah Wah boleh? Saya DM ya kuesionernya.

@calaptrvs Sini sini di bantu sebar

also, rp accounts since i have more visibility here + in case you weren’t aware already: punycode tweets are unavailable for viewing, especially in replies. so if your ooc tag is a fancy link, i’d suggest changing it to a plain/simple version instead for the time being. 🫡

@woofiehound Wah, saya kirim kuesionernya dari DM ya?

@calaptrvs aku akuu

@vanidicis Saya DM kuesionernya ya.

@calaptrvs akuuu.

nulis skripsi itu gampang. yang susah itu ngumpulin mood nya, ngejar dosbing nya, tekanan dari keluarganya, tekanan liat orang udah pada selesai nya, tekanan karena ngeprint Mulu dan keluarin duitnya.

Hey guys, instead of arguing over videogame translations maybe we can talk about how Israel is planning to murder over 9k innocent Palestinian prisoners TOMORROW?????? 9k. 9000. Nine thousand. That's so many people. It's happening TOMORROW. Guys PLEASE

@sunshincdust Hshs, can relate. Saya mau bantu isi juga tidak bisa jadi bantu sounding saja. Thank you, Hina!

@calaptrvs Wah mau ngisi tapi udah melebihi umur hue... 🚶‍♀️🚶‍♀️🚶‍♀️