Forwarded from 层叠 - The Cascading
🔴 Tanstack 系列包被骇。
- 约 42 个包的 84 个版本受到影响；Tanstack Query (
- 在 5/11 安装了受影响版本的设备可能也因此被骇。
- 恶意行为包括收集设备上的凭据，以及向设备用户维护的 npm 包加入恶意代码并重新打包发布等。
- 有用户称，恶意软件会在设备上持续运行，如果监测到其收集的 token 被 revoke，则会清空设备家目录。 [2]
tanstack.com/~
1. GHSA-g7cv-rxg3-hmpx
2. gh:TanStack/router#7383
#Tanstack
- 约 42 个包的 84 个版本受到影响；Tanstack Query (
@tanstack/react-query) 未受影响。 [1]- 在 5/11 安装了受影响版本的设备可能也因此被骇。
- 恶意行为包括收集设备上的凭据，以及向设备用户维护的 npm 包加入恶意代码并重新打包发布等。
- 有用户称，恶意软件会在设备上持续运行，如果监测到其收集的 token 被 revoke，则会清空设备家目录。 [2]
tanstack.com/~
1. GHSA-g7cv-rxg3-hmpx
2. gh:TanStack/router#7383
#Tanstack
TanStack
Postmortem: TanStack npm supply-chain compromise | TanStack Blog
On 2026-05-11, an attacker chained a pull_request_target Pwn Request, GitHub Actions cache poisoning across the fork↔base trust boundary, and OIDC token extraction from runner memory to publish 84 malicious versions across 42 @tanstack/* packages on npm.…
Forwarded from Twitter Picture Bot
Media is too big
VIEW IN TELEGRAM
Unitree:
Unitree Unveils: GD01, A Manned Transformable Mecha, from $650,000 👏
The world's first production-ready manned mecha. It can transform. It's a civilian vehicle. It weighs ~500kg with you inside.
Please everyone be sure to use the robot in a Friendly and Safe manner.
https://twitter.com/UnitreeRobotics/status/2054067819634159622
Unitree Unveils: GD01, A Manned Transformable Mecha, from $650,000 👏
The world's first production-ready manned mecha. It can transform. It's a civilian vehicle. It weighs ~500kg with you inside.
Please everyone be sure to use the robot in a Friendly and Safe manner.
https://twitter.com/UnitreeRobotics/status/2054067819634159622
🥰5
&'a ::rynco::UntitledChannel
Flight 12 Hype Video 来了! https://fixupx.com/SpaceX/status/2054304050338750931
FixupX
Scott Manley (@DJSnM)
Finally we're going to get shots of Starship from a deployed payload:
Quoting SpaceX (@SpaceX)
Starship’s twelfth flight test will debut the next generation Starship and Super Heavy vehicles, powered by the next evolution of the Raptor engine and launching…
Quoting SpaceX (@SpaceX)
Starship’s twelfth flight test will debut the next generation Starship and Super Heavy vehicles, powered by the next evolution of the Raptor engine and launching…
热插拔蛇尾
https://www.bilibili.com/video/BV1RVdQYnEfg
https://www.bilibili.com/video/BV19KdoYhEHS
https://www.bilibili.com/video/BV1Jz5t6nECa
https://www.bilibili.com/video/BV1RVdQYnEfg
https://www.bilibili.com/video/BV19KdoYhEHS
https://www.bilibili.com/video/BV1Jz5t6nECa
Bilibili
把你的尾巴借我玩玩_哔哩哔哩_bilibili
-, 视频播放量 3379662、弹幕量 3843、点赞数 53118、投硬币枚数 1512、收藏人数 22678、转发人数 22594, 视频作者 半条企鹅, 作者简介 ，相关视频：把响尾蛇的尾巴装上，把响尾蛇的尾巴换成铃铛，响尾蛇尾巴的快拆设计，你响你 女马 呢，哈基蛇哈气了，响尾蛇为什么不会咬主人，在拆掉尾巴的响尾蛇面前疯狂炫耀其他响尾蛇的尾巴，日常跟响尾蛇犯个贱（顺便看看毒牙多长了），见证响尾蛇宝宝获得蛇生中第一个响环，果蝠终于会主动上手了
🔥3
Forwarded from Solidot 纯净版
被解雇兄弟删了 96 个数据库
#犯罪
企业员工在被解雇前其凭证会提前失效，因为被解雇的员工是安全隐患。一对被同一家公司解雇的双胞胎兄弟 Muneeb 和 Sohaib Akhter 在几分钟内删掉了 96 个美国政府数据库。两兄弟有犯罪前科，曾因为犯罪行为被判刑，但 2023 年和 2024 年两人先后被同一家公司雇佣。雇主在 2025 年 2 月知道了他们过去的行为，立即解雇了他们。然而 Sohaib 的账号被关闭了，但其兄弟 Muneeb 的账号却被忽略了，Muneeb 立即采取行动对公司进行破坏，他删除了公司维护的美国政府数据库，并且还询问 AI 工具删库后如何清除服务器上的系统日志。两人最终于 12 月 3 日被捕，2026 年 4 月 15 日 Muneeb 认罪，Sohaib 则接受了陪审团的裁决，他被判有共谋罪。
https://arstechnica.com/tech-policy/2026/05/drop-database-what-not-to-do-after-losing-an-it-job/
#犯罪
企业员工在被解雇前其凭证会提前失效，因为被解雇的员工是安全隐患。一对被同一家公司解雇的双胞胎兄弟 Muneeb 和 Sohaib Akhter 在几分钟内删掉了 96 个美国政府数据库。两兄弟有犯罪前科，曾因为犯罪行为被判刑，但 2023 年和 2024 年两人先后被同一家公司雇佣。雇主在 2025 年 2 月知道了他们过去的行为，立即解雇了他们。然而 Sohaib 的账号被关闭了，但其兄弟 Muneeb 的账号却被忽略了，Muneeb 立即采取行动对公司进行破坏，他删除了公司维护的美国政府数据库，并且还询问 AI 工具删库后如何清除服务器上的系统日志。两人最终于 12 月 3 日被捕，2026 年 4 月 15 日 Muneeb 认罪，Sohaib 则接受了陪审团的裁决，他被判有共谋罪。
https://arstechnica.com/tech-policy/2026/05/drop-database-what-not-to-do-after-losing-an-it-job/
😁5😈2
EmptyJr⭐️🔭🐝 (COMMS-Closed):
H3llo Professor Grace,
My name is 🎶🎶🎵🎵🎶 I am in your relativity class (with the minor in learning the Macarena), I wanted to let you know that this coming cycle is Sacred eridian holiday where homework is terrible offence, a delay on the test would be appreciated
https://twitter.com/Empty_jr/status/2054537900357046591
H3llo Professor Grace,
My name is 🎶🎶🎵🎵🎶 I am in your relativity class (with the minor in learning the Macarena), I wanted to let you know that this coming cycle is Sacred eridian holiday where homework is terrible offence, a delay on the test would be appreciated
https://twitter.com/Empty_jr/status/2054537900357046591
❤1
Programmer Humor:
helloItsMeTheKeyboard
https://twitter.com/PR0GRAMMERHUM0R/status/2054773828123820067
helloItsMeTheKeyboard
https://twitter.com/PR0GRAMMERHUM0R/status/2054773828123820067
🥰9😁1
Forwarded from Lobste.rs
5 Years and $5M Later: Inventing a New Programming Language for Web Development Was a Mistake | Wasp
Comments
via wasp.sh via drmorr
Comments
via wasp.sh via drmorr
wasp.sh
5 Years and $5M Later: Inventing a New Programming Language for Web Development Was a Mistake | Wasp
After 5 years and $5M building Wasp, we're replacing our custom config language with TypeScript. Here's why we thought a new language was a good idea, what we learned, and why TypeScript won.
https://arxiv.org/abs/2605.12460
https://x.com/jonasgeiping/status/2054600427128201688?s=20
😎🫴 Is this VLIW?
https://x.com/jonasgeiping/status/2054600427128201688?s=20
😎🫴 Is this VLIW?
arXiv.org
Multi-Stream LLMs: Unblocking Language Models with Parallel...
The continued improvements in language model capability have unlocked their widespread use as drivers of autonomous agents, for example in coding or computer use applications. However, the core of...