Software Engineer.
Joined May 2009
- Tweets4.5K
- Following2.8K
- Followers405
- Likes95.4K
Marciomacdev retweeted
.@TinyGolang announces TinyGo 0.44 with smaller and faster programs, more multicores on microcontrollers, support for Arduino UNO R4, new drivers, and big Bluetooth updates!
tinygo.org/blog/2026/tinygo-…
🚀
Saiu versão 3.3.0 do AI-MEMORY! Atualizem!
Tá ficando ridículo de longo o changelog de cada versão kkkkk 😅
github.com/akitaonrails/ai-m…
Obrigado aos contribuidores! 🦾
Marciomacdev retweeted
Node.js 26 “Lithium” is now Long Term Support 🎉
v26.13.0 is out, with updates through April 2029.
Heads-up for Linux users coming from an earlier LTS: libatomic may need to be installed separately.
nodejs.org/en/blog/release/v…
Marciomacdev retweeted
Hyprland 0.57.0 is finally here, with tons of new stuff you don't wanna miss!
hypr.land/news/update57/
Marciomacdev retweeted
Ghostty 1.4 is now out! Full Kitty graphics with animation (the first terminal besides Kitty to do it), scrollback compression for much lower memory usage, macOS 27 support, a new OpenGL renderer on Linux, ghostty +ssh, big performance gains, and hundreds more changes.
The highlights:
- Scrollback compression: scrollback compresses ~90+% on average, meaning your terminals use that much less live memory
- Huge memory savings across the board: no single large thing, just lots of good improvements lowers memory usage everywhere, netting anywhere from 50 to 90% less memory usage depending on workload
- Kitty graphics is now 100% complete, including animation and relative placements, after a full conformance pass against the spec and Kitty itself
- The Kitty clipboard protocol, with an image preview when a program asks to read your clipboard
- Split drag and drop on Linux, including between windows
- ghostty +ssh installs terminfo on remote hosts automatically, so things just work over SSH
- Lots of terminal emulation accuracy fixes
This release is 7 months of work from 172 contributors over 2,889 commits. It also fixes 10 security advisories, so please update.
Full release notes: ghostty.org/docs/install/rel…
Marciomacdev retweeted
despite the unfortunate timing, we take disclosures seriously at @typesafeai
at approximately 6:49PM this Friday evening, we became aware of a massive unauthorized leak of ALL customer noul outputs
in effort to maximize transparency, here is the link: gist.github.com/diogo149/810…
🚨🚨🚨
despite the unfortunate timing, we take disclosures seriously at @typesafeai
at approximately 6:49PM this Friday evening, we became aware of a massive unauthorized leak of ALL customer noul outputs
in effort to maximize transparency, here is the link: gist.github.com/diogo149/810…
🚨
Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.”
A significant blast radius.
This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression.
Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.
Marciomacdev retweeted
Oracle shipped an emergency Java fix for CVE-2026-91403 (CVSS 9.1). The JSSE flaw lets a network attacker pass forged TLS certs as trusted. Java 8 through 27 are listed. Patch your JDKs today.
blogs.oracle.com/security/se…
🚨
🛑 ALERT - Node2Shell RCE exploit works on an official Node.js build.
Researchers demonstrated how crafted Brotli data can trigger code execution through vulnerable Node.js applications, without modifying the runtime.
Here's how the exploit works: thehackernews.com/2026/10/re…
Marciomacdev retweeted
October has been an absolute nightmare for software
> Railway - customer secrets exposure
> LiteLLM - malicious PyPI + Docker releases
> Zeabur - infrastructure breached
> OpenCode - AI API keys exposed
> OVHcloud CLI - official binaries backdoored
> Rank Math PRO - malware in official plugin
> TeamUpdraft - customer data compromised
> ConnectWise - cloud backup identities compromised
> Tensorlake - npm package infected
> SubQuery - backdoored npm package
> GhostAction - GitHub repos with malicious workflows
> PHP - critical RCE vulnerabilities
> Node.js - security vulnerabilities patched
> eMudhra - certificate authority keys compromised
> Tailscale - eMudhra incident
At this point, the biggest security risk might not be the code we write, but the code we trust...
🚨
Node.js Security Advisory: a high-severity RCE flaw in Node's Brotli decoder affects Node.js 22, 24, and 26.
Vercel WAF rules are live for every project and block known exploit patterns.
vercel.com/kb/bulletin/node-…
🚨
‼️ Breaking: LiteLLM Compromised – Infostealer and RAT Injected in 1.107.0 PyPI Release
Details: cybersecuritynews.com/litell…
LiteLLM version 1.107.0 was compromised on PyPI on October 21, 2026, spreading a credential stealer and a remote access trojan through all seven distributed wheel files.
The malicious release also reached Docker images, putting developer systems, build runners, and AI services at risk. Anyone who installed the affected release should assume credentials were exposed.
PyPI removed version 1.107.0, but taking down the package does not remove malware already installed or invalidate secrets attackers may have stolen. The attack uses Python startup hooks rather than relying on an application to import LiteLLM.
#CyberSecurity #cybersecuritynews #LiteLLM1.107.0
Flash 🚀
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
Marciomacdev retweeted
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
Marciomacdev retweeted
🚨 LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised.
Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools.
👀
🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.
CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.
Read - thehackernews.com/2026/10/cr…
