Pinned Tweet
@npmjs @GHSecurityLab there is an active supply chain attack on axios@1.14.1 which pulls in a malicious package published today - plain-crypto-js@4.2.1 - someone took over a maintainer account for Axios
56
396
1,475
1,960,516
designing with @paper is so nice. one shotted this with paper mcp + some brand guidelines
1
0
13
1,303
Maxwell Hammad retweeted
incredible that we built all this RAG and vector database stuff and it turns out that grep from 1973 works better than all that
177
345
8,299
510,170
Had the chance to connect with @chantastic about shipping embedded code editors in 2025, and how we approached this at @WorkOS to power JWT templates for @authkit.
WorkOS Launch Week - Day 3
{ Custom Objects }
WorkOS now gives you even more control over user, org, and session attributes with three powerful new features:
🗂️ Add Custom Metadata to users and organizations
🆔 Use your own External ID to fetch users and orgs
📜 Utilize Custom t session tokens with any JSON attributes and values
Listen in as @chantastic and Maxwell Hammad deep dive into the capabilities!
0
0
2
4,865
Maxwell Hammad retweeted
🚨 Security Alert 🚨
WorkOS is disclosing a critical SAML authentication bypass in xml-crypto and Node.js libraries.
This flaw allows attackers to forge SAML responses, potentially granting unauthorized access to any user account in affected applications—including admin er interaction. This enables full account takeovers.
WorkOS customers are safe and were not impacted.
Any service using xml-crypto or a Node.js SAML implementation using it should update immediately to the latest version.
Full blog post with technical details 👇
WorkOS is disclosing a critical SAML authentication bypass in xml-crypto and Node.js libraries.
This flaw allows attackers to forge SAML responses, potentially granting unauthorized access to any user account in affected applications—including admin er interaction. This enables full account takeovers.
WorkOS customers are safe and were not impacted.
Any service using xml-crypto or a Node.js SAML implementation using it should update immediately to the latest version.
Full blog post with technical details 👇
2
5
27
3,574