Coffee2Code

@coffeetocodehq.bsky.social

🚨 Trivy update: maintainers confirm this attack used a compromised credential carried over from the breach in early March. We’ve updated our analysis with full details on how 75 GitHub Action tags were poisoned and used to exfiltrate secrets during CI runs. socket.dev/blog/trivy-u...

Trivy Under Attack Again: Widespread GitHub Actions Tag Comp...

Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

socket.dev

“These are people who did everything by the book, paid taxes, had no criminal records, opened businesses and contributed to their communities...now they have become collateral damage in this cruel, unjust and inhumane political game.” www.washingtonpost.com/immigration/...

Venezuelans begin fleeing U.S. as protections end and threat of war looms

TPS expired for hundreds of thousands of Venezuelans on Friday. Many are shuttering business, selling homes and boarding planes, or scrambling to find a way to stay.

washingtonpost.com

Avec une hausse des primes de 4,4 % en 2026, notre système est très malade : hausses plus rapides que les salaires, opacité, actes inutiles, marketing coûteux. Notre initiative lie les primes au revenu : la classe moyenne paiera moins. D’autres projets suivront, le statu quo n’est plus une option.

Twenty Democratic-led states and the District of Columbia sued the Trump administration over its decision to withhold grant money to states that refuse to implement the president’s aggressive immigration and deportation policies.

Democratic-led states sue Trump administration over tying grant money to immigration

The lawsuit takes aim specifically at the administration’s recent threat to withhold more than $1 billion in crime victim grants in the next fiscal year.

wapo.st

Several LGBTQ+ pride events to be held as part of Washington, D.C.’s World Pride celebrations in May and June have been relocated from the John F. Kennedy Center for the Performing Arts after it said it would not move forward with contracts for the events.

World Pride event organizers move events after Trump’s Kennedy Center takeover

Some organizers say they were forced to relocate their activities after the Kennedy Center said it would not move forward with contracts for the events.

nbcnews.to

If Putin drafted a shopping list of what he wanted from Washington, it would be hard to beat what he was offered in the first 100 days of Trump’s new term. Beyond a favorable peace plan, many of Trump's actions on other fronts also suit Moscow’s interests. www.nytimes.com/2025/04/26/u...

How Trump Plays Into Putin’s Hands, From Ukraine to Slashing U.S. Institutions

Many of President Trump’s actions have been seen as benefiting Russia either directly or indirectly, so much so that Russian officials have celebrated some of his moves.

nytimes.com

We are witnessing our government institutions — whose independence is vital for the fair functioning of our legal system — being compromised and their integrity undercut in real time. This is how tyrants undermine democracy.

New consumer sentiment data just out for April: Americans’ expectations for how the economy will fare over the next year are now at their worst in 45 years. Consumer confidence is down 40% since Trump’s inauguration, including a 20% drop among Republicans.

Bild

A symbol of arrogance is assuming that anyone who disagrees with you is ignorant. Humility is more than knowing the limits of your knowledge. It’s also about respecting others' knowledge. Dissenters aren't necessarily uninformed. Differing views often stem from diverging values.

The National Weather Service has paused automated services that provide severe weather alerts in languages other than English after the government contract for those services expired, the agency confirmed to PBS News.

National Weather Service pauses severe weather alerts in Spanish and other languages

The contract for artificial intelligence modeling used to send emergency alerts in different languages is among the National Oceanic and Atmospheric Administration (NOAA) contracts that lapsed this…

buff.ly