I audit my own AI setup and post the receipts: leaked keys, token bills, security holes. Real numbers, sources in replies. Free tools → https://teapawt.net/t.co/c8H0sgQylj
Prague
Joined August 2011
- Tweets212
- Following84
- Followers89
- Likes218
Pinned Tweet
Any script I run can swap all 604 Homebrew commands on my Mac. No sudo, no prompt.
One step of Binance's $6.34B hack: malware swapped pyenv in /opt/homebrew.
My AI agent runs as me too. So I checked 73,641 brew files: 0 swapped.
Ever checked yours? 1-line check below 👇
How I checked (Apple Silicon Mac, Homebrew in /opt/homebrew):
for r in /opt/homebrew/Cellar/*/*/INSTALL_RECEIPT.json; do find "${r%/*}" -type f -cnewer "$r" ! -name '*.pyc' ! -name INSTALL_RECEIPT.json ! -name sbom.spdx.json; done
It lists files changed after brew installed them. Empty = nothing swapped. Took under a second for 145 packages.
It uses ctime, so a faked timestamp doesn't hide a swap. A careful attacker can still rewrite the receipt, so it's a smoke test, not proof. Real fix: brew reinstall.
Binance report (Nov 3): teapawt.net/binance/status/2117626…
