TGViewer
Channel Public Channel
Linkstream

Linkstream

@linkstream

Various links I find interesting. Mostly hardcore tech :) // by @oleksandr_now. See @notatky for the personal stuff
Subscribers
169
Photos
37
Videos
3
Links
965

Showing posts older than #976 · Back to latest

Older Posts 20 shown
Post #971 164
this is getting boring, but
PyPi lightning 2.6.2/2.6.3 (a dependency of pyannote-audio, you maybe use it if you do speech recognition) and npm intercom-client 7.0.4 compromised (maintainers hacked)
  • 😢 1
Post #967 168
how coding agents might just unlock a whole new sphere of creativity
https://andymatuschak.org/tat/
To invent a new user interface, you need both imaginative design skill and fluent technical skill. Very few people possess both. ... also requires deep domain insight. I think of Steinberg inventing the timeline editor in Cubase after years as a musician and producer, or Bricklin inventing the dynamic spreadsheet while at Harvard Business School.
andymatuschak.org Apps and programming: two accidental tyrannies On coding agents, malleable software, and the future of interface invention
Post #965 168
Post #961 210
PSA: npm axios package has been hacked, unlike LiteLLM if you do frontend you probably DO use it;
npm pins package version by default but at least def dont npm i axios rn.

bun has minimumReleaseAge; also i've arrived at radical golang-style dependency vendoring via npm pack if I don't foresee them updated often
https://x.com/feross/status/2038807290422370479?s=46
X (formerly Twitter) Feross (@feross) on X 🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. …
  • 👾 1
Post #960 184
Post #959 164
⚠️ PSA: LiteLLM 1.82.7, 1.82.8 on PyPI has been hacked and contains code that extracts credentials etc from the machine where it runs then self-replicates

IoCs:
File: litellm_init.pth (34,628 bytes) in site-packages/
File: ~/.config/sysmon/sysmon.py
File: ~/.config/systemd/user/sysmon.service
Domain: models.litellm[.]cloud
K8s: node-setup-* pods in kube-system


always pin your dependency versions.
  • 😱 1
Post #957 163
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →