@penzlik

Frens, most of the feed is doing the usual panic cosplay. The GitHub repo grab is noise for most people. The real signal is the malicious package wave. That’s the one you check. If you use durabletask, TanStack, @antv, OpenSearch, Guardrails, or UiPath, check your versions. If you install random npm or pip stuff, run npm audit and pip-audit. Simple. Everything else is cleanup theater.

0 reply

0 recast

3 reactions