Reposted by David Buchanan
have you seen the new supply chain vuln? don't update tubu. it's literally on heebee. they got poodee's deps. they infiltrated dippy. roll back weeno. disable scripts in ~/.gumpyrc. it's in poob. do not install poob. do not update poob. uninstall poob right now. poob has it in for you.
![me: guess the author of this blog post draft
[redacted]
opus 4.7: This reads like David Buchanan (retr0id) to me.
A few signals point that way: the technical register mixes rigorous detail with casual asides ("imho," "no-brainer," "good!"), the willingness to write a polemical "Considered Harmful" post against widely-used tooling, the specific interest in low-level file format / database internals, the offhand mention of demonstrating the issue with a Python script, and the [screenshot ends here]](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:vwzwgnygau7ed7b7wt5ux7y2/bafkreib5gpsd67xijuohsuwo3izii5f3zgqsux6srqw4l4nhls4axn4io4)
