Mayank

from the `axios` maintainer (https://github.com/axios/axios/issues/10636):

> "they scheduled a meeting with me to connect. the meeting was on ms teams. … the meeting said something on my system was out of date. i installed the missing item as i presumed it was something to do with teams, and this was the RAT."

what?? why are people installing random shit to join a phone call smh

Post Mortem: axios npm supply chain compromise · Issue #10636 · axios/axios

Post Mortem: axios npm supply chain compromise Date: March 31, 2026 Author: Jason Saayman Status: Remediation in progress On March 31, 2026, two malicious versions of axios (1.14.1 and 0.30.4) were...

GitHub
Apr 3 at 5:43pmWeb
Show threadMayank2d ago

zoom, ms teams, google meet all let you join calls directly from your browser. you should never need to install anything, except maybe a chromium browser if you don't already have one.

i realize this may not be common knowledge.

Show threadAlex | アレックス2d ago

@mayank zoom REALLLYY wants that install. Teams isn’t much better their web interface is kind of broken

Meet is great as long as AI stuff is disabled

Show threadMayank2d ago
@dodgycoffee yeah… zoom and ms need to do so much better.
Show threadAlex | アレックス2d ago

@mayank MS needs to just delete all of teams.

Protons new meet thing is also great.

Show threadLuke2d ago
@mayank they do shove you towards downloading the app. Like there's a delay before the join from browser even shows. Absolutely ridiculous that technical people are still falling for these sorts of scams imo but then blaming the victim of the scam doesn't really solve the issue. We need to penalising companies that create these patterns in the first place.