banner
LightNews
evilpacket.net
Adam Baldwin
@evilpacket.net
940 followers 600 following 490 posts
Hacker / Farmer / Builder / Breaker Prev: Code4rena, Okta, Auth0, GitHub, npm, ^lift, &yet, Symantec. Pioneered BlindXSS & DVCS Pillaging npm audit is my fault. More info: https://evilpacket.net
evilpacket.net
Posts Media Videos Starter Packs
Pinned
evilpacket.net
Adam Baldwin @evilpacket.net · Jan 27
Disobey.
1 1 15
evilpacket.net
Adam Baldwin @evilpacket.net · 12h
If somebody says “ah shit” and then pauses my brain immediately busts out “I got a head rush”
2
evilpacket.net
Adam Baldwin @evilpacket.net · 2d
npm install totallynotavirustrustmeimadolphin
asrivkin.bsky.social
Andy Rivkin @asrivkin.bsky.social · 2d
In honor of spooky month, share a 4 word horror story that only someone in your profession would understand.

Visit Planner timed out.
barbylon.bsky.social
barbylon @barbylon.bsky.social · 2d
In honor of spooky month, share a 4 word horror story that only someone in your profession would understand.

The valve stuck open.
5
Reposted by Adam Baldwin
beny23.github.io
Gerald Benischke @beny23.github.io · 2d
Nice GitHub vuln via copilot. Good thing copilot isn’t being stuffed into everything. www.legitsecurity.com/blog/camolea...
CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
Get details on our discovery of a critical vulnerability in GitHub Copilot Chat.
www.legitsecurity.com
1
Reposted by Adam Baldwin
dansinker.com
dan sinker @dansinker.com · 7d
Again, I just want to reiterate: we are in a golden age for people that want to crime. Go plan the most elaborate heist you can imagine. You'll get away with it, all the feds are otherwise occupied.
cnn.com
CNN @cnn.com · 7d
The Trump administration has ordered FBI employees in Washington, DC, to immediately search their workstations and digital media for any records pertaining to the disappearance of Amelia Earhart, a law enforcement source told CNN.
FBI employees ordered to immediately search for records related to Amelia Earhart, source says | CNN Politics
The Trump administration has ordered FBI employees in Washington, DC, to immediately search their workstations and digital media for any records pertaining to the disappearance of Amelia Earhart, a la...
www.cnn.com
7 22 110
Reposted by Adam Baldwin
kojamf.bsky.social
KOJAMF🤘🖤🤘 @kojamf.bsky.social · 10d
Dr. Jane Goodall filmed an interview with Netflix in March 2025 that she understood would only be released after her death.
810 17K 38K
evilpacket.net
Adam Baldwin @evilpacket.net · 9d
Turnabout is fair play.
Reposted by Adam Baldwin
pegoidal.bsky.social
Pegs @pegoidal.bsky.social · 11d
9 22
evilpacket.net
Adam Baldwin @evilpacket.net · 11d
Hell yeah. That’s a nice feeling. I’m still chasing that dragon and need to clean my workshop 😅
1
evilpacket.net
Adam Baldwin @evilpacket.net · 11d
You’re still going to wonder if the AI pentester missed something.
1 2
evilpacket.net
Adam Baldwin @evilpacket.net · 12d
It’s wild to be able to hear a gif.
1
evilpacket.net
Adam Baldwin @evilpacket.net · 12d
ok now my dictation software (yes I yell at my computer, don't you?) keeps replacing cloudflare with Claude Flair. I think I'm done with computers for today.
2 3
evilpacket.net
Adam Baldwin @evilpacket.net · 12d
no, not usually but it's not right either in this case.
1
evilpacket.net
Adam Baldwin @evilpacket.net · 12d
Nothing seems more useless than this button. WTF even happens when this is pressed?
evilpacket.net
Adam Baldwin @evilpacket.net · 12d
Claude, every. single. time.

"You're absolutely right! That would be much better. "
2 2
Reposted by Adam Baldwin
lisaforte.bsky.social
Lisa Forte @lisaforte.bsky.social · 13d
As its cyber sec awareness month 🤣
10 53
Reposted by Adam Baldwin
feross.bsky.social
Feross @feross.bsky.social · 14d
🚨 Open source supply chain attacks are exploding.

Starting today, that ends.

We’re releasing Socket Firewall — FREE, zero-config, CLI that blocks malware before it lands on your laptop or CI.

Just run:

npm i -g sfw
sfw npm install lodash

Works for: npm, yarn, pnpm, pip, uv, and cargo.
7 12 45
evilpacket.net
Adam Baldwin @evilpacket.net · 15d
Because depression is a mfr and I needed something
positive to say 😅
1 1
evilpacket.net
Adam Baldwin @evilpacket.net · 16d
Happy Monday. Hack the planet!
a man in a car is screaming and says hack the planet
ALT: a man in a car is screaming and says hack the planet
media.tenor.com
1
Reposted by Adam Baldwin
chaos440.bsky.social
Lou Inglese @chaos440.bsky.social · 17d
Got my performance review.
Old floppy drive with printed label 'Works, but makes Sad Noises'
78 3.2K 15K
evilpacket.net
Adam Baldwin @evilpacket.net · 19d
I miss working on the node security project. Haven’t found a similar joy since.
3
Reposted by Adam Baldwin
campuscodi.risky.biz
Catalin Cimpanu @campuscodi.risky.biz · 21d
The Python Software Foundation warns of a phishing campaign targeting PyPI users. The phishing domain is pypi-mirror[.]org, a variation of the main pypi[.]org domain.

blog.pypi.org/posts/2025-0...
Phishing attacks with new domains likely to continue - The Python Package Index Blog
A new phishing campaign targeting PyPI users using similar tactics to previous campaigns.
blog.pypi.org
3 3
evilpacket.net
Adam Baldwin @evilpacket.net · 21d
Fun fact about me. I wake up most days with physically manifesting crippling anxiety. It's the best™
2
evilpacket.net
Adam Baldwin @evilpacket.net · 23d
Sausage pig.
evilpacket.net
Adam Baldwin @evilpacket.net · 24d
Got root today.
1 5
Reposted by Adam Baldwin
zkat.tech
Witch’s Black Kat Marchán 🐈‍⬛🧙🏼 @zkat.tech · 26d
welcome to genai where everything is made up and people don't matter
4 9