Sabitlenmiş Tweet
𝖒𝖚𝖘𝖆𝖎𝖉
10.9K posts
𝖒𝖚𝖘𝖆𝖎𝖉
@musaid
𝔗𝔥𝔢 𝖗𝖔𝖌𝖚𝖊 #𝔡𝔢𝔳𝔢𝔩𝔬𝔭𝔢𝔯 𝛅 𝔱𝔥𝔢 𝖋𝖔𝖗𝖌𝖔𝖙𝖙𝖊𝖓 𝔢𝔫𝔱𝔯𝔢𝔭𝔯𝔢𝔫𝔢𝔲𝔯. 𝔽𝕦𝕝𝕝-𝕊𝕥𝕒𝕔𝕜 𝔻𝕖𝕧 @lottiefiles
Male', Maldives Katılım Ocak 2009
298 Takip Edilen603 Takipçiler
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
⚠️ ALERT - A threat group exploited a Next.js flaw to compromise 766+ hosts and steal cloud credentials at scale.
Using automated scripts, attackers extracted AWS secrets, SSH keys, and API tokens, all managed through a central dashboard for reuse.
🔗 Read → thehackernews.com/2026/04/hacker…
English
Pretty sure I can build this out in a weekend these days. Nobody needs 13 million dollars to build this not to pay for infrastructure costs
Midhuam Saud(米渡）🇲🇻@Midhuamsaud
I’m told MTCC awarded a ~MVR 13 million “MaleTaxiApp” project to a company called FixedMaldives. Key concerns being raised: - No open bidding, only selected suppliers were invited - Fixed Maldives is a sole proprietorship registered in 2022, with no listed business names, activity permits, or relevant licenses - Their services don’t indicate app development capabilities - Portfolio shows experience in hardware, cameras, and networking: not software development - Project was reportedly due for completion in November, but app remains unfinished as of yesterday - Multiple payments have already been made This is something journalists should look into, to verify the facts, clarify the procurement process, and provide transparency on the project’s current status.
English
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
.@meetgranola finally shipped their API.
I built a tiny hack to turn meeting notes into tasks instantly.
Because after three meetings, “I’ll handle that” means nothing.
Meet Daylight: daylight.am
English
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
🤨 People keep asking how to protect yourself.
#1: set min-release-age=7 in .npmrc
#2: install Socket for GitHub (it's free!) to protect PRs from bad dependencies: socket.dev/features/github
#3: install Socket Firewall (also free!) to protect your laptop: socket.dev/features/firew…
Feross@feross
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
English
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
In #Minab, rows of small graves tell a story the world refuses to hear—children who only wanted to learn, not to die.
#NeverForget #StandWithIran
#مدرسه_میناب
English
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
At least 243 students and teachers have been killed since the start of the US-Israel war on Iran, an official from Iran’s Education Ministry says.
🔴 LIVE updates: aje.news/rcsjp4
English
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
𝖒𝖚𝖘𝖆𝖎𝖉 retweetledi
