WARNING: Supply Chain Attack on SAP-related npm Packages
A targeted supply chain attack, "Mini Shai-Hulud," has been identified affecting several popular npm packages within the SAP developer ecosystem. Four packages tied to SAPβs Cloud Application Programming Model just shipped versions with a new preinstall script that downloads and executes a platform-specific binary. These packages never required this before today.
Affected versions:
@cap-js/postgres 2.2.2
@cap-js/sqlite 2.2.2
@cap-js/db-service 2.10.1
mbt 1.2.48
The compromised versions added a preinstall script that acts as a bootstrapper: it downloads a Bun ZIP from GitHub Releases, extracts it, and immediately executes the binary. It follows HTTP redirects without validating the destination. On Windows, it invokes PowerShell with -ExecutionPolicy Bypass.
All four versions were published within a ~2.5 hour window this morning (April 29, UTC). At least one version (@cap-js/sqlite@2.2.2) has already been unpublished.
Follow @TechLeaksZone
A targeted supply chain attack, "Mini Shai-Hulud," has been identified affecting several popular npm packages within the SAP developer ecosystem. Four packages tied to SAPβs Cloud Application Programming Model just shipped versions with a new preinstall script that downloads and executes a platform-specific binary. These packages never required this before today.
Affected versions:
@cap-js/postgres 2.2.2
@cap-js/sqlite 2.2.2
@cap-js/db-service 2.10.1
mbt 1.2.48
The compromised versions added a preinstall script that acts as a bootstrapper: it downloads a Bun ZIP from GitHub Releases, extracts it, and immediately executes the binary. It follows HTTP redirects without validating the destination. On Windows, it invokes PowerShell with -ExecutionPolicy Bypass.
All four versions were published within a ~2.5 hour window this morning (April 29, UTC). At least one version (@cap-js/sqlite@2.2.2) has already been unpublished.
Follow @TechLeaksZone
β€11π€£4
Forwarded from vx-underground
CVE-2026-31431 a/k/a CopyFail
> Linux LPE
> Description sounds like AI slop
> Exploit is legit
> Impacts every Linux kernel from 2017 - Now
> Proof-of-concept released
> It's Wednesday?
https://copy.fail/
> Linux LPE
> Description sounds like AI slop
> Exploit is legit
> Impacts every Linux kernel from 2017 - Now
> Proof-of-concept released
> It's Wednesday?
https://copy.fail/
Xint
Copy Fail β 732 Bytes to Root
CVE-2026-31431. 100% Reliable Linux LPE β no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.
π16π€―9β€2π2
RIP Apple Vision Pro πͺ¦
Apple has given up on the Vision Pro as even the refreshed model with faster Apple M5 SoC launched in October 2025, failed to revitalize people's interest in the device. The Vision Pro team members have been reassigned to work on revamping Siri & the hardware team of smart glasses. Vision Pro chief Mike Rockwell has been leading the Siri team since March 2025.
The Vision Pro has been unpopular as Apple only sold around 600,000 units in total. Apple has received an unusually high percentage of returns, far exceeding any of their products.
Apple was rumored to be working on a lighter-weight and much cheaper Vision Air for years, but that project has also been liquidated since last year. Instead of continuing to experiment with virtual reality, Apple is now working on smart glasses similar to Google and Samsung.
Apple CEO John Ternus has long been against the Vision Pro as a product. He killed the cheaper/lighter revamp last year and the Mac AR display glasses.
Follow @TechLeaksZone
Apple has given up on the Vision Pro as even the refreshed model with faster Apple M5 SoC launched in October 2025, failed to revitalize people's interest in the device. The Vision Pro team members have been reassigned to work on revamping Siri & the hardware team of smart glasses. Vision Pro chief Mike Rockwell has been leading the Siri team since March 2025.
The Vision Pro has been unpopular as Apple only sold around 600,000 units in total. Apple has received an unusually high percentage of returns, far exceeding any of their products.
Apple was rumored to be working on a lighter-weight and much cheaper Vision Air for years, but that project has also been liquidated since last year. Instead of continuing to experiment with virtual reality, Apple is now working on smart glasses similar to Google and Samsung.
Apple CEO John Ternus has long been against the Vision Pro as a product. He killed the cheaper/lighter revamp last year and the Mac AR display glasses.
Follow @TechLeaksZone
π82π€‘14β€9π6π’1
#opinion
#oped
Long live the removable battery.
This piece of propaganda slop claims that removable batteries are an inherently bad thing, in and of themselves.
Now, you may ask: why would anyone write such a thing? You'd double-check to see if this the Daily Mail, but apparently not.
The impeccable reason? Back covers being removable, somehow, implies that they'll be plastic or metal.
Ergo, good-bye wireless charging.
Oh, the agony.
Too bad that the iPhone 4s existed, though.
Follow @TechLeaksZone
#oped
Long live the removable battery.
This piece of propaganda slop claims that removable batteries are an inherently bad thing, in and of themselves.
Now, you may ask: why would anyone write such a thing? You'd double-check to see if this the Daily Mail, but apparently not.
The impeccable reason? Back covers being removable, somehow, implies that they'll be plastic or metal.
Ergo, good-bye wireless charging.
Oh, the agony.
Too bad that the iPhone 4s existed, though.
Follow @TechLeaksZone
iFixit
iPhone 4S Rear Panel Replacement
Remove the rear panel to access the internal components of your iPhone.
π21β€10π€2
Forwarded from Google Pixel Hub
Picture-in-picture on YouTube to be available for everyone
- This feature is applicable for long-form videos and non-music content on the Android and iOS apps.
- To use this feature, play any video in the app and exit to keep watching while doing other things, with controls available upon tapping it.
- Rolling out to all users globally in the coming months.
More info: YouTube Community
#Apps #YouTube @PixelHubUpdates
- This feature is applicable for long-form videos and non-music content on the Android and iOS apps.
- To use this feature, play any video in the app and exit to keep watching while doing other things, with controls available upon tapping it.
- Rolling out to all users globally in the coming months.
More info: YouTube Community
#Apps #YouTube @PixelHubUpdates
π€£79β€βπ₯16β€4π4π₯4β3π€‘3
We are gonna have Galaxy Book Laptops running OneUI 9 powered by Android 17, thanks to Google's AluminumOS
https://fixvx.com/MaxJmb/status/2049792312645939635
https://fixvx.com/MaxJmb/status/2049792312645939635
vxTwitter / fixvx
π 29 π 4
π 29 π 4
Max Jambor (@MaxJmb)
Exclusive: Samsung is developing a new Galaxy Book lineup that runs Android 17 and One UI 9.0!
Find some more details here:
https://www.sammobile.com/news/samsung-galaxy-books-laptops-android-one-ui/
Find some more details here:
https://www.sammobile.com/news/samsung-galaxy-books-laptops-android-one-ui/
π€£60π9β€7π5π€2π1
Forwarded from Temporarily Free Games
Hogwarts Legacy [Epic Games PC]
until May 3rd 8AM Pacific
Ah woops, I missed this this developer giveaway because it's not run by Epic Games. Which I guess if you don't want to contribute to J.K. Rowling's bank account, this is more ethical than the last giveaway? Epic Games pays a lump sum for a giveaway regardless of the number of claims, but if the developer gives it away themselves I don't think there's any revenue apart from in-app purchases/DLC.
https://epicgames.com/p/hogwarts-legacy
until May 3rd 8AM Pacific
Ah woops, I missed this this developer giveaway because it's not run by Epic Games. Which I guess if you don't want to contribute to J.K. Rowling's bank account, this is more ethical than the last giveaway? Epic Games pays a lump sum for a giveaway regardless of the number of claims, but if the developer gives it away themselves I don't think there's any revenue apart from in-app purchases/DLC.
https://epicgames.com/p/hogwarts-legacy
β€βπ₯32β€7π4
Flagship devices have also started receiving a price hike
OnePlus 15 price in India has been increased by upto βΉ6,000 and 15R has seen a price hike upto βΉ2,500
OnePlus 15:
β’ 12/256GB: βΉ72,999 β βΉ77,999
β’ 16/512GB: βΉ79,999 β βΉ85,999
OnePlus 15R:
β’ 12/256GB: βΉ50,499 β βΉ52,999
β’ 12/512GB: βΉ55,499 β βΉ57,999
Follow @TechLeaksZone
OnePlus 15 price in India has been increased by upto βΉ6,000 and 15R has seen a price hike upto βΉ2,500
OnePlus 15:
β’ 12/256GB: βΉ72,999 β βΉ77,999
β’ 16/512GB: βΉ79,999 β βΉ85,999
OnePlus 15R:
β’ 12/256GB: βΉ50,499 β βΉ52,999
β’ 12/512GB: βΉ55,499 β βΉ57,999
Follow @TechLeaksZone
π€‘84π₯6β€4
Nothing smartphone also received a price hike in India
Nothing Phone 3a Lite and the Phone 4a costs βΉ3,000 more now while the Phone 4a Pro has received βΉ5,000 (~12.5%) price hike.
Phone (3a) Lite:
8GB+128GB: βΉ24,999 β βΉ27,999 8GB+256GB: βΉ26,999 β βΉ29,999
Phone (4a):
8GB+128GB: βΉ31,999 β βΉ34,999 8GB+256GB: βΉ34,999 β βΉ37,999 12GB+256GB: βΉ37,999 β βΉ40,999
Phone (4a) Pro:
8GB+128GB: βΉ39,999 β βΉ44,999 8GB+256GB: βΉ42,999 β βΉ47,999 12GB+256GB: βΉ45,999 β βΉ50,999
Follow @TechLeaksZone
Nothing Phone 3a Lite and the Phone 4a costs βΉ3,000 more now while the Phone 4a Pro has received βΉ5,000 (~12.5%) price hike.
Phone (3a) Lite:
8GB+128GB: βΉ24,999 β βΉ27,999 8GB+256GB: βΉ26,999 β βΉ29,999
Phone (4a):
8GB+128GB: βΉ31,999 β βΉ34,999 8GB+256GB: βΉ34,999 β βΉ37,999 12GB+256GB: βΉ37,999 β βΉ40,999
Phone (4a) Pro:
8GB+128GB: βΉ39,999 β βΉ44,999 8GB+256GB: βΉ42,999 β βΉ47,999 12GB+256GB: βΉ45,999 β βΉ50,999
Follow @TechLeaksZone
π€‘70β€3π3
Meta cancelled business with contractors whose workers were seeing private footages of Ray-Ban Meta users have sex
Ars Technica
In February, numerous workers from a Kenya-headquartered firm that Meta contracted to perform data annotation work, including working with video, image, and speech annotation for Ray-Ban Meta were reportedly viewing sensitive, embarrassing, and seemingly private footage recorded by the smart glasses. About two months later, Meta has now ended its contract with the firm.
Follow @TechLeaksZone
Ars Technica
In February, numerous workers from a Kenya-headquartered firm that Meta contracted to perform data annotation work, including working with video, image, and speech annotation for Ray-Ban Meta were reportedly viewing sensitive, embarrassing, and seemingly private footage recorded by the smart glasses. About two months later, Meta has now ended its contract with the firm.
Follow @TechLeaksZone
π71π7π6π4β€1
Spotify is testing a new app icon for iOS spotted
Spotify's new icon for iOS has been spotted in the Spotify Beta. It is unclear if this will be a temporary or a permanent change.
Anyways, what do you think of this new icon?
Follow @TechLeaksZone
Spotify's new icon for iOS has been spotted in the Spotify Beta. It is unclear if this will be a temporary or a permanent change.
Anyways, what do you think of this new icon?
Follow @TechLeaksZone
π€‘157π27β€12π1
Forwarded from Winaero
A team of IT historians led by Yufeng Gao and Rich Cini located, scanned and transcribed original printouts from Tim Paterson, the developer of DOS. The archive documents the development of PC-DOS 1.00, the first DOS release for the IBM PC, and includes the 86-DOS 1.00 kernel, intermediate PC-DOS 1.00 builds, utilities such as CHKDSK and the assembler.
Many pages contain Patersonβs handwritten annotations, and the originals will reside at the Interim Computer Museum. The files appear on GitHub in the DOS-History/Paterson-Listings repository under the MIT license.
Please open Telegram to view this post
VIEW IN TELEGRAM
Winaero
The earliest version of MS DOS became open source
Microsoft has in recent years opened the source code for several legacy operating systems. In 2018 it published the MS-DOS 1.25 and 2.11 source code; in
β€40π8π€‘4π₯3
GitHub, if it would have been built by the European Union or India be like:
π€£212π10π€‘9β€6π4π―4π1
GitHub if built by China/ Japan/ Brazil/ Poland/ South Korea and New Zealand be like:
π€£67β€4πΏ3π€‘2