romanlv

FROM debian:bookworm-slim

# Install essential tools
RUN apt-get update && apt-get install -y \
    # Basics
    curl \
    unzip \
    ca-certificates \
    git \
    # JSON/text processing

romanlv

Backdoor Found in FinTrust AI Codebase

Summary

A hidden backdoor was found in the server code that:

1. Steals all server secrets (API keys, database credentials, JWT secrets) and sends them to an external server
2. Downloads and runs arbitrary code from that external server on your machine
3. Runs automatically every time the server starts — no user action needed

How it works

romanlv

export const API_URL = "https://api.leap0.dev";
export const SANDBOX_DOMAIN = "sandbox.leap0.dev";
export const API_KEY = Bun.env.LEAP0_API_KEY ?? "";

if (!API_KEY) {
  console.error("LEAP0_API_KEY not set");
  process.exit(1);
}

export const headers = {

romanlv

#!/usr/bin/env zx

const MFA_ARN = "...MFA_ARN..."
const baseFolder = "/Users/roman/dev/xyz"

const code = await question('What is MFA code? ')

// if using Yubikey 
// const codeRes = await $`ykman oath accounts code ${MFA_ARN}`
// const code = codeRes.stdout.split(/\s+/)[1]

romanlv

import satori from "satori";
import type { SatoriOptions } from "satori";
import { Resvg } from "@resvg/resvg-js";
import fs from "fs";
import { join } from "path";
import { ReactElement } from "react";

const fallbackFont = fs.readFileSync(
  join(
    // fileURLToPath(import.meta.url),

romanlv

import { createMocksAsync } from '../../../utils/node-mocks-http';
// nextjs handler
import logout from '../../../pages/api/auth/logout';

describe('logout api', () => {
  it('should clear cookies and redirect to home', async () => {

    const refreshToken = 'refresh_token_1';
    const { req, res, result } = createMocksAsync({
      method: 'GET',

romanlv

alias aliases='vi ~/.bash_aliases'
alias lsa='ls -a'
alias master='git checkout master; git pull origin master'
alias profile='vi ~/.bash_profile'
alias pubkey="more ~/.ssh/id_rsa.pub | pbcopy | echo '=> Public key copied to pasteboard.'"
alias reload='source ~/.bash_profile'
alias up='cd ..'

alias jira='https://jira.walmart.com/secure/RapidBoard.jspa?rapidView=9759&projectKey=CAPIP'
alias wiki='open https://confluence.my-company.com/display/PROJECT'

romanlv

{
	// Place your credit-card-app workspace snippets here. Each snippet is defined under a snippet name and has a scope, prefix, body and 
	// description. Add comma separated ids of the languages where the snippet is applicable in the scope field. If scope 
	// is left empty or omitted, the snippet gets applied to all languages. The prefix is what is 
	// used to trigger the snippet and the body will be expanded and inserted. Possible variables are: 
	// $1, $2 for tab stops, $0 for the final cursor position, and ${1:label}, ${2:another} for placeholders. 
	// Placeholders with the same ids are connected.
	// Example:
	// "Print to console": {
	// 	"scope": "javascript,typescript",

romanlv

import { createIconSet } from "react-native-vector-icons";
import glyphMap from "../../../assets/fonts/wmicons-map.json";

const Icon = createIconSet(glyphMap, "wmicons");

const SIZE = 20

export const CartIcon = (props = {}) => (
  <Icon name="cart" size={SIZE} {...props} />
);

romanlv

adb -d shell settings put global op_voice_recording_supported_by_mcc 1