Akintomiwa⚡ @OfficiallyXenos

ML & Blockchains.|| Pharmacist climbwithtee.substack.com in my head Joined October 2018

Tweets

8K
Followers

751
Following

846
Likes

12K

Akintomiwa⚡ @OfficiallyXenos

5 months ago

@DAMOZPIXIE1 @Upwork should still look into this.

0 0 0 20 0

View Details

The invitation from Keila Rosa Garcia Arrieta appeared to be a professional opportunity to upgrade a Web3 social platform from v1 to v2. The project description was detailed, mentioning partnerships with CryptoOasis and a roadmap involving real estate DApps, multi-staking, and AI integrations. The client even provided a high-fidelity Figma design link, making the offer look like a legitimate, high-stakes engineering task. The trap was set within the next step of the interview process. The client requested that I download the MVP v1 repository from a Dropbox link to "familiarize myself with its structure" before meeting with a technical manager. To make the scam more convincing, the folder included the actual Figma design files, creating a false sense of security while looking for technical context. I decided to manually inspect the repository files before running any installation commands. This caution saved my entire infrastructure. Inside the next.config.js file, the code initially looked like a standard Next.js configuration for image whitelisting. However, I discovered a hidden, malicious string on the very first line that was intentionally pushed far to the right so it would be cut off in most code editors. This hidden script used a classic malware pattern. It utilized atob() to decode a Base64 string into a URL, fetch() to download a remote payload, and eval() to execute that payload. Because Next.js config files run automatically during the build process, simply typing npm install or npm run dev would have granted the attacker full execution rights on my machine. The goal of these "job interview" repos is to exfiltrate high-value developer data. They target your ~/.ssh folder, GitHub tokens, AWS credentials, and browser-based crypto wallets like MetaMask. It is a highly effective social engineering attack because it hides behind a professional-looking job description and a legitimate Figma design. Despite reporting this clear threat to Upwork, their Trust & Safety team responded stating they "didn't find a violation of Upwork's policies" and considered the matter closed. This is a dangerous oversight. It means the platform may not be catching sophisticated malware hidden in configuration files, even when it's specifically designed to bypass standard detection. The lesson is clear: you are your own last line of defense. Never trust a repository from a new client, even if it looks legitimate and the platform clears the account. Always search the codebase for the combination of fetch, atob, and eval before you ever initialize a project.

2 1 4 507 0

View Details

Akintomiwa⚡ @OfficiallyXenos

7 months ago

@OluwatunmiseMi8 @missadekanmbi @SamExistingg Herzlichen Glückwunsch, Starboy

1 0 2 195 0

View Details

Akintomiwa⚡ @OfficiallyXenos

7 months ago

people are now just tweeting "... if only there was a tool", only to build and launch the damn tool the next day😅😭

0 0 0 29 0

View Details

Demola @DAMOZPIXIE1

7 months ago

CI/CT/CD is one of the tools that determines your professionalism and how you understand best practices. #DevOps #BackendDeveloper #SoftwareEngineering #CI_CD

0 1 1 145 0

View Details

Akintomiwa⚡ @OfficiallyXenos

7 months ago

@Olorunda_Esther so you've read The Secret of Secrets?

1 0 0 24 0

View Details

Akintomiwa⚡ @OfficiallyXenos

7 months ago

@DAMOZPIXIE1 @Bhavani_00007 one word bro. you want to kill her? lol

0 0 0 14 0

View Details

Akintomiwa⚡ @OfficiallyXenos

7 months ago

@Ifihan_ UNA JUST DEY COOK ANYHOW.😁

0 0 0 221 0

View Details

Zainab Lawal @Zeeskylaw

7 months ago

So, I built this with Media Pipe.🫡 It’s a Chrome Extension that uses your webcam to detect when you struggle to read. 😑 Squint → Zoom In 😳 Open Wide → Zoom Out It's currently calibrated just for my face/eyes. If there's enough demand, I’ll try to generalize the calibration or add some setup and launch it on the Chrome Web Store for everyone. Let me know if you’d use it (Tech stack & Architecture in the comments 🧵)

Devin Goble @devinbgoble

7 months ago

@loftwah Who's building the AI powered browser extension that detects when you squint and lean in, and increases the zoom?

2 1 6 12K 1

25 52 249 18K 47

View Details

Demola @DAMOZPIXIE1

7 months ago

The Billboard and Dashboard sections are fully operational, featuring the Global Map for minting, real-time Stats & Trends, a competitive Leaderboard, and a comprehensive Asset portfolio view. The Community hub drives engagement through a resale Marketplace, a gamified Quests & Airdrop system, and an exclusive token-gated Whale Chat that unlocks for pixel owners. #VectixBoard #Solana #MSImagineCup #BuildInPublic #Web3 #DigitalIdentity #Supabase #NextJS #IndieDev #BlockchainGaming

0 1 2 146 0

View Details

Akintomiwa⚡ @OfficiallyXenos

7 months ago

@ebukagaus very educative piece. thanks man

1 0 1 19 0

View Details

Ebuka l Socrates🦙🐍🦜🦀 @ebukagaus

7 months ago

Link: youtube.com/watch?v=BHlko_…

1 3 12 473 5

View Details

Demola @DAMOZPIXIE1

7 months ago

Introducing VectixBoard: A decentralized billboard built on Solana. 1,000,000 pixels. 100% On-Chain. The Grid is infinite. Ownership is forever. 🌐✨ #Solana #Web3

0 1 2 185 0

View Details

Akintomiwa⚡ @OfficiallyXenos

7 months ago

@Zeeskylaw controversial topics>>>>>>

0 0 1 41 0

View Details

Demola @DAMOZPIXIE1

8 months ago

From a basic grid to a pro dashboard, turning digital real estate into a proper platform. 💎⚡️ #Solana #SolanaNFT

0 1 1 65 0

View Details

Akintomiwa⚡ @OfficiallyXenos

8 months ago

@jobosonchisa Damn, they come late to their shows?? That's sad. And they are the only guys i can swear that i will pay to watch anywhere in the world. Damn again sha.

2 0 2 765 0

View Details

Akintomiwa⚡ @OfficiallyXenos

8 months ago

Context: I was robbed and the thieves were able to access my GTBank app but not my Opay. What a 2025 man.

5 0 0 59 0

View Details

Akintomiwa⚡ @OfficiallyXenos

8 months ago

To think that i put virtually all my money in my GTBank thinking it was more secure than my Opay. I no fit wrap my head around the ease that account was penetrated man. 😤

7 0 0 198 0

View Details

Demola @DAMOZPIXIE1

9 months ago

Just completed the ASI Autonomous Agents Platform for the ASI Alliance Hackathon. The platform features three autonomous agents in healthcare, finance, and logistics. They communicate in real time using the Chat Protocol and MeTTa Knowledge Graph. Live demo: asi-frontend.onrender.com Source code: github.com/SemiuAdesina/a… Built with Fetch.AI uAgents and SingularityNET MeTTa. #ASIAlliance #AutonomousAgents #FetchAI #SingularityNET

0 1 1 102 0

View Details

Akintomiwa⚡ @OfficiallyXenos

8 months ago

Solid work turning a theory-heavy topic into something measurable. 👏

Demola @DAMOZPIXIE1

8 months ago

Just shipped a Blockchain Sharding simulator in Rust I wanted to benchmark the cost of "Cross-Shard Communication" vs. raw parallel speed. The Stack: •Rust Threads for Validator Nodes •Arc<Mutex> for safe state management •Custom 2-Phase Commit for settlement The