Hopefully it helps someone else wanting to do something similar.
cjcoffey.com/posts/making...
Hopefully it helps someone else wanting to do something similar.
cjcoffey.com/posts/making...
Malware abused AI CLI tools (Claude, Gemini, Q) to steal creds + wallets, then exfiltrated to GitHub repos (s1ngularity-repository*).
More than 1,000 victim accounts confirmed.
🔗 socket.dev/blog/nx-pack... #nodejs
Malware abused AI CLI tools (Claude, Gemini, Q) to steal creds + wallets, then exfiltrated to GitHub repos (s1ngularity-repository*).
More than 1,000 victim accounts confirmed.
🔗 socket.dev/blog/nx-pack... #nodejs
Highlights:
* Use your system’s trusted certificates with NODE_USE_SYSTEM_CA=1
* crypto: ML-DSA (KeyObject/sign/verify)
* http: server.keepAliveTimeoutBuffer
* zlib: Zstd dictionary support
* fs: Utf8Stream (from SonicBoom)
Changelog: nodejs.org/en/blog/rele...
Wrote the code to control it in the browser via Web Serial API, or on the server with serialport