Graham O'Nero on Nostr: >wake up >discover there is javascript supply chain NPM infection targeting BTC >it ...
>wake up
>discover there is javascript supply chain NPM infection targeting BTC
>it doesn't target Monero
>"why didn't I keep Nosmero XMR-exclusive for zapping?"
Fortunately, it is a pretty painless patch to fix Nosmero.com and BTC zapping is needed to honor the nostr ethos. Anyway, read about it here:
https://jdstaerk.substack.com/p/we-just-found-malicious-code-in-thePublished at
2025-09-08 19:45:32 UTCEvent JSON
{
"id": "a95f6ae641bda8c27230aa41eea97f0ee32ac5bb988cc399f437eb0830ac6712",
"pubkey": "35d38fa2efb7c9f4b1bf20a4d2cded731b152ed871a0aac9d72347265c9b42d8",
"created_at": 1757360732,
"kind": 1,
"tags": [],
"content": "\u003ewake up\n\u003ediscover there is javascript supply chain NPM infection targeting BTC\n\u003eit doesn't target Monero\n\u003e\"why didn't I keep Nosmero XMR-exclusive for zapping?\"\n\nFortunately, it is a pretty painless patch to fix Nosmero.com and BTC zapping is needed to honor the nostr ethos. Anyway, read about it here:\nhttps://jdstaerk.substack.com/p/we-just-found-malicious-code-in-the",
"sig": "0071175b7398d7d74a84c0c8c871f64f05f0dd1c936b9bc1b3a93a5f1aa9588f51d5ef31151cd12c953492c0b549283f2efc424aec7b92b783f92c071fce1db5"
}
