Kubernetes enthusiast. Developing "AppThrust," an open-source PaaS running on managed Kubernetes in my own AWS environment.
Joined April 2007
- Tweets 13,854
- Following 177
- Followers 2,305
- Likes 16,841
689 Photos and videos
PRおくれなかったのでCodexのissue 11877にコメント残しておいた。 github.com/openai/codex/issu…
勝手に改善したCodexは、 github.com/openai/codex/comp… ここ。
137
github.com/apple/container Apple Containerが1.0になった
1
2
309
けど、Kubernetes の Kind だと使えない、から github.com/reoring/kind/tree… forkして対応中。
1
1
259
github.com/reoring/kind/rele…
Apple ContainerでKindを使えるようにした状態のkindをいったんリリース
202
reoring retweeted
May 11
SECURITY ADVISORY — TanStack npm packages
A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package.
Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down.
Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys.
If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised:
• Rotate cloud, GitHub, and SSH credentials immediately
• Audit cloud audit logs for the last several hours
• Pin to a prior known-good version and reinstall from a clean lockfile
Detection — the malicious manifest contains:
"optionalDependencies": {
"@tanstack/setup": "github:tanstack/router#79ac49ee..."
}
Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root).
Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level.
Full technical breakdown, complete package and version list, and rolling status updates:
github.com/TanStack/router/i…
Credit to the security researcher for responsible disclosure.
138
980
3,851
3,906,025
reoring retweeted
Sub-millisecond VM sandboxes are here.
Zeroboot boots preloaded environments, snapshots them, then forks new isolated VMs in ~0.8ms.
This changes how we think about running agents and serverless workloads.
39
162
1,522
118,787