GitHub Star ⭐Microsoft MVP for Developer Technologies & AI 2018-2026 GitHub Community Leader - Mumbai Microsoft Global Community Initiative - Regional Leader
Joined May 2018
- Tweets2.8K
- Following705
- Followers438
- Likes2K
Pinned Tweet
#Mumbai has Bollywood stars, sure… but now your boy is officially a GitHub Star! 🌟
लय भारी scene: 500+ registrations already locked in for #DevDays - my very first event since the star dropped.
The community is the real star here. ❤️
Join: scan.hackmum.in/devdays
#mumtechup
Augustine C retweeted
October has been an absolute nightmare for software
> Railway - customer secrets exposure
> LiteLLM - malicious PyPI + Docker releases
> Zeabur - infrastructure breached
> OpenCode - AI API keys exposed
> OVHcloud CLI - official binaries backdoored
> Rank Math PRO - malware in official plugin
> TeamUpdraft - customer data compromised
> ConnectWise - cloud backup identities compromised
> Tensorlake - npm package infected
> SubQuery - backdoored npm package
> GhostAction - GitHub repos with malicious workflows
> PHP - critical RCE vulnerabilities
> Node.js - security vulnerabilities patched
> eMudhra - certificate authority keys compromised
> Tailscale - eMudhra incident
At this point, the biggest security risk might not be the code we write, but the code we trust...
Augustine C retweeted
[status] Investigating: We are currently investigating this issue. stspg.io/fr89w5qkp7j4?u=pfj7…
Augustine C retweeted
wow this is bad!
ENTIRETY of PingCap database used by linkedin, flipkart, airbnb etc. has been copied and stolen due to customer credentials being stored directly in support tickets (LOL)
Attackers ran exfiltration directly on their cloud (LOL) pipeline ran for 22 days, exfiltrating data every 6 hours and NO ONE noticed. Worse, PingCap denies all of it.
Average SRE salary is $300,000 at PingCap btw
Augustine C retweeted
I read this and I'm terrified, the situation seems intractable.
In the python ecosystem alone every cpython install, venv, UV is at risk.
Don't get my started on npm, pnpm, yarn, go, rust.
My current 2026 security posture: stay home and only connect to the internet from a trusted ISP.
The winter is coming.
discuss.python.org/t/informa…
Augustine C retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
Augustine C retweeted
Railway is compromised, rotate all API keys as soon as possible
Deployments are down so don’t wait to redeploy
Attackers are draining keys in real time, we didn’t lose much but can confirm this is still an active attack
Stay safe friends
Augustine C retweeted
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free.
We are seeing early attacks emerging and are updating mitigations as new vectors show up.
This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
Augustine C retweeted
Cloudflare open-sourced the security audit skill that seeded its own vulnerability hunting harness. Your coding agent can now run it on your code.
How it works, in 6 phases:
→ maps your codebase
→ hunts for bugs area by area so nothing gets skipped
→ sends every finding to a fresh agent that didn't find it, to confirm it's real
→ writes structured results
→ verifies each record again, independently
→ writes the final report
You get a findings file split into confirmed, needs validation and rejected, so you fix the real problems first.
Install:
npx skills add github.com/cloudflare/securi… --skill security-audit
Then open your agent in your project and type: "security audit this codebase"
MIT licensed, 31.3K stars.
All set to welcome builders and hackers to @hacktoberfest #mumbai #HF26Mumbai @Paytm #Oct26MTP #mumtechup
Augustine C retweeted
If you had a ticket to Grace Hopper and have not cancelled your plans to go to the bay, go to LinkedIn and DM GitHub right now if you’d like to attend Universe for free.
Grace Hopper Celebration Canceled: A Big Loss For Women In Tech This Year buff.ly/ZwOSpB6
Augustine C retweeted
trying something new... i've shared 8 community-requested features we're exploring and would love your feedback.
upvote the comments for ideas you'd find useful or reply with your thoughts.
github.com/orgs/community/di…
Augustine C retweeted
Introducing Anatomy
Describe a machine in one line. Claude brings it to life.
- Interactive isometric wireframes you can rotate, inspect and explore
- WebGL shaders for fire, water, plasma and more
- Real 3D motion, with individual parts that rotate and move
Install it as an agent skill. Fully open source.
Augustine C retweeted
Introducing snapcn
Build stunning product demo videos with code.
100+ @Remotion components for animated titles, captions, device mockups, AI chat sequences, and complete scenes.
Install with the shadcn CLI, customize the source, and make it yours.
100% Free. Open source.
Every new @aspiredotdev release has me excited to update.
#aspire update ✅
@dotnet restore ❌ NU1109
@VisualStudio @code then opens the .csproj, but the fix is in Directory.Packages.props.
If CPM is recommended for #dotnet, the update experience should be first-class too.
Receipts. 👇
Filed an issue for this a while back:
aspire update ✅
dotnet restore ❌ NU1109
If a recommended upgrade path regularly leaves CPM users fixing Directory.Packages.props by hand, that's a DX problem, not a user problem.
github.com/microsoft/aspire/…
Augustine C retweeted
Considering adding a recommendation to /retro to turn repeated tasks into custom tooling (i.e. a CLI + skill)
Talking to @poteto made me realise the power of agents delegating tasks to scripts they own and control
Means fewer tokens, fewer hallucinations
Augustine C retweeted
I got an apology note from the team. We accidentally published some benchmark results but at least we are number #1 :) More seriously open benchmarks helps us make sure we deliver great value so thanks to @computesdk
A great session on @salesforce #AgentForce #AgentStudio @sbilquis27 @nikhil_trekker – at Mumbai, India
