Max

Great Nix Flake Check is out!

youtuber clickbait voice I Tried Evaluating EVERY Nix Flake And Here Is What I Found

(ok but seriously, I found a bunch of cool stuff and wrote it down, go check it out!)

https://goldstein.lol/posts/great-nix-flake-check/

The Great Nix Flake Check | max’s place

Apr 7 at 3:45pmWeb
Show threadPol DellaieraApr 7
@goldstein That's such a masterpiece post ! Congratulations :)
Show threadPolyWolfApr 7
@goldstein this is really cool!! nice writeup, congrats on completing the project
Show threadXdejApr 8
@goldstein
You tried every nix flake: Does that imply that you installed dependencies that is known malwares like litellm https://www.trendmicro.com/en_us/research/26/c/inside-litellm-supply-chain-compromise.html or unknown malware more stealthy and possibly evading their jails?
@raito @Pol
Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise

TeamPCP orchestrated one of the most sophisticated multi-ecosystem supply chain campaigns publicly documented to date that cascaded through developer tooling and compromised LiteLLM, exposing how AI proxy services that concentrate API keys and cloud credentials become high-value collateral when supply chain attacks compromise upstream dependencies.

Trend Micro
Show threadMaxApr 8
@xdej @raito @Pol maybe! (although probably not, given that my sample, being from sourcegraph, probably only includes github repos with at least some popularity). that’s why the tests were evaluated on a separate machine, and then each in their own container.