Developer: #Arkeogis, @Booksonwall, @P113_hola, #CMS, #Strapi, #SIG,@express, @NodeJs, @Reactjs, @ReactNative , @Virohq , #WebAr ,#Aframe, #MindAr, #Threejs
Montpellier, France
Joined August 2022
- Tweets5.2K
- Following882
- Followers86
- Likes5.7K
Tom Bouillut retweeted
📦 Plasma UI - Liquid panels for React
I don't know who needs that kind of thing, but it remains impressive 😆
cruxgarden.github.io/plasma-…
Tom Bouillut retweeted
🚨 Another major supply chain incident 🚨
axios — one of the most widely used npm packages — has been compromised. Malicious versions axios@1.14.1 and axios@0.30.4 were published and are actively dropping malware.
The attack pulls in a newly created dependency plain-crypto-js@4.2.1, confirmed as a malicious loader: it executes obfuscated payloads, runs shell commands, and attempts to evade detection while wiping traces.
With 100M+ weekly downloads, this is a live, large-scale supply chain attack.
More details: stepsecurity.io/blog/axios-c…
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise.
This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.
Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:
• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence
If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
Tom Bouillut retweeted
It’s a mystery … alleged unpatched Telegram zero-day allows device takeover, but Telegram denies securityaffairs.com/190167/s…
securityonline.info/telegram…
oulah ça craint un max ....
115
Tom Bouillut retweeted
GATE137
New art rendered with @rendernetwork 🔥
Tom Bouillut retweeted
"byegl" is an initiative to make the WebGL->WebGPU transition seamless for established WebGL apps.
In the end, apps that use "byegl" to migrate will be built on top of WebGPU, not on top of potentially limiting abstractions. Follow us along on the journey!
#webgl #webgpu #byegl
Tom Bouillut retweeted
Node.js v24.7.0 is out 💚
Featuring:
- Post-Quantum Cryptography in node:crypto
- Modern Algorithms in Web Cryptography API
- Node.js execution argument support in single executable applications
And more details in our blog: nodejs.org/en/blog/release/v…
Tom Bouillut retweeted
Google just took a big step towards building ChatGPT for Earth.
AlphaEarth Foundations does something clever -- instead of drowning in petabytes of Earth observation data, it creates compact summaries of every 10x10m square on Earth by fusing optical, radar, LiDAR, and climate data.
The kicker is it can see through clouds in Ecuador and reveal hidden agricultural patterns in Canada. MapBiomas and Global Ecosystems Atlas already using it for conservation work.
Tom Bouillut retweeted
🍹 Meet Drink Crafter — an open-source cocktail robot by @rene_bohne powered by our XIAO ESP32C6. It runs a sleek local web interface with recipe management, pump calibration & PIN resets — all hosted on the ESP32.
Compatible with our XIAO 6-Channel Wi-Fi 5V DC Relay.
Full details on @github 👉 bit.ly/4kWEXuS
Tom Bouillut retweeted
React Native Reanimated 4 is now stable and ready for production 🐎
Featuring CSS Animations & Transitions, multithreading with React Native Worklets and more.
Tom Bouillut retweeted
If you've ever struggled to debug js-libp2p or Helia (formerly js-ipfs) in browsers and Node.js, here's a great overview:
Learn to Debug js-libp2p & Helia in Browsers and Node.js
youtu.be/AKNGtn7EZxI
Tom Bouillut retweeted
La version BETA 1 de Proxmox est disponible.
Poir toutes les nouveautés et son téléchargement, c'est par la 👇
pve.proxmox.com/wiki/Roadmap…
Tom Bouillut retweeted
We ran a randomized controlled trial to see how much AI coding tools speed up experienced open-source developers.
The results surprised us: Developers thought they were 20% faster with AI tools, but they were actually 19% slower when they had access to AI than when they didn't.
