Cliff'sEsportCorner

@CliffsEsport
6 Followers
198 Following
1.7K Posts
One of the most popular JavaScript packages on earth Axios has been compromised

The Axios NPM package has been compromised and the maintainer of the project has been locked out of their account. This will go down in history as one of the most successful software supply chain attacks ever

An open-source project called Axios (not the website), which has over 100M downloads weekly, was briefly hijacked overnight to drop remote access malware into two releases, potentially affecting countless developers. Already called "one of the most impactful npm supply chain attacks on record." 👀

by the very excellent @carlypage: https://www.theregister.com/2026/03/31/axios_npm_backdoor_rat/

Supply chain blast: Top npm package backdoored to drop dirty RAT on dev machines

: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios

The Register

Apple has introduced a security feature in macOS Tahoe 26.4 that blocks pasting and executing potentially harmful commands in Terminal and alerts users to possible risks.

https://www.bleepingcomputer.com/news/security/apple-adds-macos-terminal-warning-to-block-clickfix-attacks/

Apple adds macOS Terminal warning to block ClickFix attacks

Apple has introduced a security feature in macOS Tahoe 26.4 that blocks pasting and executing potentially harmful commands in Terminal and alerts users to possible risks.

BleepingComputer

J.P. Morgan’s supply-chain mapping suggests the last pre-disruption Persian Gulf cargoes hit South-East Asia, South Asia and East Africa by about 1 April, Europe by about 10 April, and the US by about 15 April. Australia's is due by 20 April... after those dates, the absence of replenishment becomes much harder to hide.

The Strait of Hormuz disruption is not just about crude. Analysts and logistics reporting say it also hits LNG, LPG, petrochemicals, methanol, plastics feedstocks and helium, which means the pain doesn’t stop at the bowser. It runs through manufacturing, freight, construction inputs, chemicals and tech supply chains as inventories thin out.

So the sequence is roughly this:

First, people panic locally.
Then wholesalers and retailers start paying up to secure supply.
Then inventories that were already on the water get delivered.
Then the pipeline starts running dry.
That is when the shock stops being a story for traders and shipping nerds and starts becoming obvious to everyone else.

Australia sits in that early wave. The map’s timing lines up with reports that parts of Asia have already been scrambling for replacement cargoes, with even unusual US Gulf Coast-to-Australia distillate routes being used to plug gaps.

And if the disruption drags on, this stops being about “higher prices” and becomes about allocation.

Who gets fuel.
Who pays more.
Which industries keep moving.
Which ones start slowing, rationing, or passing costs straight through to households.

Barclays says that the Hormuz disruption could remove 13 - 14 million barrels a day from global supply, while Kpler says cumulative losses could exceed 400 million barrels by mid-April if flows don’t normalise.

So yes, shortages so far have been partly behavioural... fear, stockpiling, domestic scrambling.
But the actual physical supply problem has yet to come.

For our part of the world, the cliff edge is very close. By mid-April, the “surely they’ll sort it out” phase gives way to the “oh, this is real” phase. Europe follows. The US later, but still not immune, especially through price rather than outright physical scarcity.

In other words... the panic buying is the opening act.
The real show starts when the ships stop arriving.

From The Gerk https://substack.com/@snarkygherkin/note/c-234844710?utm_source=notes-share-action

#IranWar

Ubuntu has a controversial proposal that wants to rip out many GRUB features.

https://itsfoss.com/news/ubuntu-26-10-grub-overhaul/

#linux #ubuntu

Why Ubuntu 26.10 Might Drop ZFS, RAID & Encryption Support

The proposal calls for stripping out filesystem drivers and other features.

It's FOSS

NEW: Hackers have leaked a portion of FBI director Kash Patel's emails online, confirming Reuters.

TechCrunch has verified that at least portion of the leaked emails from Patel's Gmail account were authentic by verifying cryptographic signatures contained in the emails.

w/ @lorenzofb:

https://techcrunch.com/2026/03/27/iranian-hackers-claim-breach-of-fbi-director-kash-patels-personal-email-account/

Iranian hackers claim breach of FBI director Kash Patel's personal email account | TechCrunch

Handala, a pro-Iranian hacking group allegedly working for Iran’s government, published emails it said were taken from the Gmail account of FBI director Kash Patel.

TechCrunch

Apple has discontinued the Mac Pro, and the company tells me it has no plans to offer future Mac Pro hardware.

Full story: https://9to5mac.com/2026/03/26/apple-discontinues-the-mac-pro/

Apple discontinues the Mac Pro with no plans for future hardware - 9to5Mac

It’s the end of an era: Apple has confirmed to 9to5Mac that the Mac Pro is being discontinued. It has...

9to5Mac
Update: @Hacker0x01 replied to my email and I have my response inline. I hope this is the last I will hear about this because frankly I do not have the time or energy to care any more about this than what I have already done.
Lmao @Hacker0x01 told me the backdoor was known "through internal security assessments" and they're "closing this report as out of scope". But now are pissed I disclosed it. Nobody should use this joke of a platform who put the interests of companies over that of users.
We are experiencing a fiber outage in San Francisco. Hope to be back online soon. Apologies for the disruption!