Fake Job Recruiters Hid Malware In Developer Coding Challenges

“A new variation of the fake recruiter campaign from North Korean threat actors is targeting JavaScript and Python developers with cryptocurrency-related tasks,” reports the Register.

Researchers at software supply-chain security company ReversingLabs say that the threat actor creates fake companies in the blockchain and crypto-trading sectors and publishes job offerings on various platforms, like LinkedIn, Facebook, and Reddit. Developers applying for the job are required to show their skills by running, debugging, and improving a given project. However, the attacker’s purpose is to make the applicant run the code… [The campaign involves 192 malicious packages published in the npm and PyPi registries. The packages download a remote access trojan that
can exfiltrate files, drop additional payloads, or execute arbitrary commands sent from a command-and-control server.]

In one case highlighted in the ReversingLabs report, a package named ‘bigmathutils,’ with 10,000 downloads, was benign until it reached version 1.1.0, which introduced malicious payloads. Shortly after, the threat actor removed the package, marking it as deprecated, likely to conceal the activity… The RAT checks whether the MetaMask cryptocurrency extension is installed on the victim’s browser, a clear indication of its money-stealing goals…

ReversingLabs has found multiple variants written in JavaScript, Python, and VBS, showing an intention to cover all possible targets.

The campaign has been ongoing since at least May 2025…


Read more of this story at Slashdot.

Ezurio Carbon AM62 Targets Industrial Linux with TI Sitara AM62x

Ezurio has introduced the Carbon AM62, a 45 x 30mm OSM-MF v1.2 system-on-module based on TI’s Sitara AM623 and AM625 processors. The solder-down module integrates a TPS65219 PMIC, LPDDR4 memory, eMMC storage, and optional Wi-Fi 6 and Bluetooth LE via Ezurio’s Sona wireless modules. Carbon AM62 integrates up to a quad-core Arm Cortex-A53 processor clocked […]

Analysis of JWST Data Finds – Old Galaxies in a Young Universe?

Two astrophysicists at Spain’s Instituto de Astrofísica de Canarias analyzed data from the James Webb Space Telescope — the most powerful telescope available — on 31 galaxies with an average redshift of 7.3 (when the universe was 700 million years old, according to the standard model). “We found that they are on average ~600 million years old old, according to the comparison with theoretical models based on previous knowledge of nearby galaxies…”

“If this result is correct, we would have to think about how it is possible that these massive and luminous galaxies were formed and started to produce stars in a short time. It is a challenge.”

But “The fact that some of these galaxies might be older than the universe, within some significant confidence level, is even more challenging.”

The most extreme case is for the galaxy JADES-1050323 with redshift 6.9, which has, according to my calculation, an age incompatible to be younger than the age of the universe (800 million years) within 4.7-sigma (that is, a probability that this happens by chance as statistical fluctuation of one in one million).

If this result is confirmed, it would invalidate the standard Lambda-CDM cosmological model. Certainly, such an extraordinary change of paradigm would require further corroboration and other stronger evidence. Anyway, it would be interesting for other researchers to try to explain the Spectral Energy Distribution of JADES-1050323 in standard terms, if they can … and without introducing unrealistic/impossible models of extinction, as is usually done.

The findings are published in the journal Monthly Notices of the Royal Astronomical Society.


Read more of this story at Slashdot.

Additional Benefits For Brain, Heart, and Lungs Found for Drugs Like Viagra and Cialis

“Research published in the World Journal of Men’s Health found evidence that drugs such as Viagra and Cialis may also help with heart disease, stroke risk and diabetes,” reports the Telegraph, “as well as enlarged prostate and urinary problems.”

Researchers found evidence that the same mechanism may benefit other organs, including the heart, brain, lungs and urinary system. The paper reviewed a wide range of published studies [and] identified links between PDE5 inhibitor use and improvements in cardiovascular health. Heart conditions were repeatedly cited as an area where improved blood flow and muscle relaxation may offer benefits. Evidence also linked PDE5 inhibitors with reduced stroke risk, likely to be related to improved circulation and vascular function. Diabetes was another condition where associations with improvement were identified… The review also found evidence of benefit for men with an enlarged prostate, a condition that commonly causes urinary symptoms.


Read more of this story at Slashdot.

Your Friends Could Be Sharing Your Phone Number with ChatGPT

“ChatGPT is getting more social,” reports PC Magazine, “with a new feature that allows you to sync your contacts to see if any of your friends are using the chatbot or any other OpenAI product…”

It’s “completely optional,” [OpenAI] says. However, even if you don’t opt in, anyone with your number who syncs their contacts are giving OpenAI your digits. “OpenAI may process your phone number if someone you know has your phone number saved in their device’s address book and chooses to upload their contacts,” the company says…

But why would you follow someone on ChatGPT? It lines up with reports, dating back to April, that OpenAI is building a social network. We haven’t seen much since then, save for the Sora generative video app, which exists outside of ChatGPT and is more of a novelty. Contact sharing might be the first step toward a much bigger evolution for the world’s most popular chatbot.
ChatGPT also supports group chats that let up to 20 people discuss and research something using the chatbot. Contact syncing could make it easier to invite people to these chats…

[OpenAI] claims it will not store the full data that might appear in your contact list, such as names or email addresses — just phone numbers. However, the company does store the phone numbers in its servers in a coded (or hashed) format. You can also revoke access in your device’s settings. 09


Read more of this story at Slashdot.

Small Crowd Pays to Watch a Boxing Match Between 80-Pound Chinese Robots

Recently a small crowd paid to watch robots boxing, reports Rest of World. (Almost 3,000 people have now watched the match’s 83-minute webcast.)

The match was organized by Rek, a San Francisco-based company, and drew hundreds of spectators who had paid about $60-$80 for a ticket to watch modified G1 robots go at each other. Made by Unitree, the dominant Chinese robot maker, they weighed in at around 80 pounds and stood 4.5 feet tall, with human-like hands and dozens of joint motors for flexibility. The match had all the bells and whistles of a regular boxing bout: pulsing music, cameras capturing all the angles, hyped-up introductions, a human referee, and even two commentators. The evening featured two bouts made up of five rounds, each lasting 60 seconds. The robots pranced around the cage, throwing jabs and punches, drawing ohs and ahs from the crowd. They fell sometimes, and needed human intervention to get them back on their feet.

The robots were controlled by humans using VR interfaces, which led to some odd moments with robots hitting into the air, throwing multiple punches that failed to even connect with their opponents. One robot controller was a former UFC fighter, the article points out, but “The crowd cheered as a 13-year-old VR pilot named Dash beat his older competitor….”

The company behind this event plans more boxing matches with their VR-controlled robots, and even wants to develop “a league of robot boxers, including full-height robots that weigh about 200 pounds and are nearly 6 feet tall.”


Read more of this story at Slashdot.

US Government Will Stop Pollution-Reduction Credits for Cars With ‘Start-Stop’ Systems

Starting in 2009, the U.S. government have given car manufacturers towards reducing greenhouse gas emissions if they included “start-stop” systems in cars with internal combustion engines. (These systems automatically shut off idling engines to reduce pollution and fuel consumption.)

But this week the new head of America’s Environmental Protection Agency eliminated the credits, reports Car and Driver:

[America’s] Environmental Protection Agency previously supported the system’s effectiveness, noting that it could improve fuel economy by as much as 5 percent. That said, the use of these systems has never actually been mandated for automakers here in the States. Companies have instead opted to install the systems on all of their vehicles to receive off-cycle credits from the feds. Virtually every new vehicle on sale in the country today also allows drivers to turn the feature off via a hard button as well. Still, that apparently isn’t keeping the EPA from making a move against the system.

“I absolutely hate Start-Stop systems,” writes long-time Slashdot reader sinij (who says they “specifically shopped for a car without one.”) Any other Slashdot readers want to share their opinions?

Post your own thoughts and experiences in the comments. Start-Stop systems — fuel-saving innovation, or a modern-day auto annoyance”


Read more of this story at Slashdot.