@showxlate ↔ @lucas_sangoi conversation
Nicholas Michael Kloster@showxlate
16 views
Oct 31, 2026
~1 min read
Advertisement
Nicholas Michael Kloster@showxlate
Proof REA is is malicious.
This repository is simultaneously:
(1) the vehicle for an active social engineering campaign harvesting credentials and biometric data from users who install it,
(2) the subject of apparent artificial star inflation to manufacture legitimacy, and
(3) the host of an architectural vulnerability enabling prompt-injection-to-RCE in AI agent workflows.
The combination of pre-positioned @latest install instructions and a coordinated amplification network represents a complete supply-chain attack delivery mechanism should a malicious package version be published.
This repository is simultaneously:
(1) the vehicle for an active social engineering campaign harvesting credentials and biometric data from users who install it,
(2) the subject of apparent artificial star inflation to manufacture legitimacy, and
(3) the host of an architectural vulnerability enabling prompt-injection-to-RCE in AI agent workflows.
The combination of pre-positioned @latest install instructions and a coordinated amplification network represents a complete supply-chain attack delivery mechanism should a malicious package version be published.
Lucas Freire Sangoi@lucas_sangoi
here, this is all you need to RE/decompile anything:
github.com/sangoi-exe/rad…
github.com/sangoi-exe/r2g…
github.com/sangoi-exe/ghi…
github.com/sangoi-exe/rad…
you don't need some bloated repo to do it, you don’t even need these, the agents already know everything they need to, the tools just make things easier and faster.
github.com/sangoi-exe/rad…
github.com/sangoi-exe/r2g…
github.com/sangoi-exe/ghi…
github.com/sangoi-exe/rad…
you don't need some bloated repo to do it, you don’t even need these, the agents already know everything they need to, the tools just make things easier and faster.
