<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[I&#x27;ll be honest, if you&#x27;re going to do a supply chain attack on source code repos, at least make it funny like this one]]></title><description><![CDATA[<p>I'll be honest, if you're going to do a supply chain attack on source code repos, at least make it funny like this one</p>

<div class="row mt-3"><div class="col-12 mt-3"><img class="img-thumbnail" src="https://cyberplace.social/system/media_attachments/files/116/495/130/737/879/753/original/0e58d39b106bb182.png" alt="Link Preview Image" /></div></div>]]></description><link>https://board.circlewithadot.net/topic/204c2099-b3c4-4c2d-bc43-0d4ef0a41142/i-ll-be-honest-if-you-re-going-to-do-a-supply-chain-attack-on-source-code-repos-at-least-make-it-funny-like-this-one</link><generator>RSS for Node</generator><lastBuildDate>Sat, 30 May 2026 22:57:26 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/204c2099-b3c4-4c2d-bc43-0d4ef0a41142.rss" rel="self" type="application/rss+xml"/><pubDate>Thu, 30 Apr 2026 18:44:23 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to I&#x27;ll be honest, if you&#x27;re going to do a supply chain attack on source code repos, at least make it funny like this one on Thu, 30 Apr 2026 20:49:35 GMT]]></title><description><![CDATA[<p><span><a href="/user/gossithedog%40cyberplace.social">@<span>GossiTheDog</span></a></span> I had a brief spike in blood pressure and pulse this morning.</p>]]></description><link>https://board.circlewithadot.net/post/https://nerdculture.de/users/audin/statuses/116495625954653391</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://nerdculture.de/users/audin/statuses/116495625954653391</guid><dc:creator><![CDATA[audin@nerdculture.de]]></dc:creator><pubDate>Thu, 30 Apr 2026 20:49:35 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;ll be honest, if you&#x27;re going to do a supply chain attack on source code repos, at least make it funny like this one on Thu, 30 Apr 2026 19:34:29 GMT]]></title><description><![CDATA[<p><span><a href="/user/dubbel%40mstdn.io">@<span>dubbel</span></a></span> <span><a href="/user/gossithedog%40cyberplace.social">@<span>GossiTheDog</span></a></span> a few days ago I told a friend "no one would bother compromising emacs packages" and I now owe someone an apology</p>]]></description><link>https://board.circlewithadot.net/post/https://cyberplace.social/ap/users/116440692978306561/statuses/116495330133879106</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://cyberplace.social/ap/users/116440692978306561/statuses/116495330133879106</guid><dc:creator><![CDATA[sharkfie@cyberplace.social]]></dc:creator><pubDate>Thu, 30 Apr 2026 19:34:29 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;ll be honest, if you&#x27;re going to do a supply chain attack on source code repos, at least make it funny like this one on Thu, 30 Apr 2026 19:29:58 GMT]]></title><description><![CDATA[<p><span><a href="/user/gossithedog%40cyberplace.social">@<span>GossiTheDog</span></a></span> I tell myself that I was raising the supply chain awareness of my team by sharing this incident just days before the trivy/aquasecurity compromise news broke: <a href="https://www.stepsecurity.io/blog/kubernetes-el-compromised-how-a-pwn-request-exploited-a-popular-emacs-package" rel="nofollow noopener"><span>https://www.</span><span>stepsecurity.io/blog/kubernete</span><span>s-el-compromised-how-a-pwn-request-exploited-a-popular-emacs-package</span></a></p><p>Both compromises used the same github action vulnerability iirc.</p>]]></description><link>https://board.circlewithadot.net/post/https://mstdn.io/users/dubbel/statuses/116495312373635832</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mstdn.io/users/dubbel/statuses/116495312373635832</guid><dc:creator><![CDATA[dubbel@mstdn.io]]></dc:creator><pubDate>Thu, 30 Apr 2026 19:29:58 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;ll be honest, if you&#x27;re going to do a supply chain attack on source code repos, at least make it funny like this one on Thu, 30 Apr 2026 18:48:58 GMT]]></title><description><![CDATA[<p><span><a href="/user/gossithedog%40cyberplace.social">@<span>GossiTheDog</span></a></span> nevermind, I found a generator: Silence Crab Meme Generator <a href="https://share.google/mYbYz05RoXKs9lZI1" rel="nofollow noopener noreferrer"><span>https://</span><span>share.google/mYbYz05RoXKs9lZI1</span><span></span></a></p>]]></description><link>https://board.circlewithadot.net/post/https://merveilles.town/users/oppen/statuses/116495151150544329</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://merveilles.town/users/oppen/statuses/116495151150544329</guid><dc:creator><![CDATA[oppen@merveilles.town]]></dc:creator><pubDate>Thu, 30 Apr 2026 18:48:58 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;ll be honest, if you&#x27;re going to do a supply chain attack on source code repos, at least make it funny like this one on Thu, 30 Apr 2026 18:47:23 GMT]]></title><description><![CDATA[<p><span><a href="/user/gossithedog%40cyberplace.social">@<span>GossiTheDog</span></a></span> have you got a URL, I want to download this meme for my team.</p>]]></description><link>https://board.circlewithadot.net/post/https://merveilles.town/users/oppen/statuses/116495144941603343</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://merveilles.town/users/oppen/statuses/116495144941603343</guid><dc:creator><![CDATA[oppen@merveilles.town]]></dc:creator><pubDate>Thu, 30 Apr 2026 18:47:23 GMT</pubDate></item></channel></rss>