~lanlyd
906 posts

~lanlyd
@lanlyd_star
~lanlyd is a distant star on the Urbit network. Join us! Nostr: npub178x87hm5zaclcq5mfpshe90rsj5nxyl7sgc7xa2mw0eavgzvlaysngkukr


🚨 There’s a large-scale supply chain attack in progress: the NPM account of a reputable developer has been compromised. The affected packages have already been downloaded over 1 billion times, meaning the entire JavaScript ecosystem may be at risk. The malicious payload works by silently swapping crypto addresses on the fly to steal funds. If you use a hardware wallet, pay attention to every transaction before signing and you're safe. If you don’t use a hardware wallet, refrain from making any on-chain transactions for now. It’s still unclear whether the attacker is also stealing seeds from software wallets directly at this stage. Excellent report here: jdstaerk.substack.com/p/we-just-foun…






New blog post: The State of Urbit ift.tt/fXeEwGv




head down in the code mines for the last 6 weeks is really paying off



