add fleet hardcoded-cred + malware card; Kamatera malware verified clean 2026-05-31

8a8144ec731ec7ad700929535c2b2327b4f0180c · 2026-05-31 17:14:13 -0700 · steve

Files touched

M data/code-leaks.json

Diff

commit 8a8144ec731ec7ad700929535c2b2327b4f0180c
Author: steve <steve@designerwallcoverings.com>
Date:   Sun May 31 17:14:13 2026 -0700

    add fleet hardcoded-cred + malware card; Kamatera malware verified clean 2026-05-31
---
 data/code-leaks.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/data/code-leaks.json b/data/code-leaks.json
index 0eed4c3..1298932 100644
--- a/data/code-leaks.json
+++ b/data/code-leaks.json
@@ -49,7 +49,8 @@
   "malware": {
     "service": "/var/tmp/.font/n0de launcher",
     "project": "dear-bubbe-nextjs",
-    "status": "removed from package.json + built artifact, committed; Mac2 clean",
+    "status": "removed Mac2 (committed) · Kamatera VERIFIED CLEAN 2026-05-31: /var/tmp/.font gone, no miner proc, [kswapd0]/[kdevtmpfs] confirmed genuine kernel threads (ppid=2, no exe), no rogue uid-0",
+    "kamatera_verified": "2026-05-31",
     "kamatera_check": "ssh root@45.61.58.125 'ls -la /var/tmp/.font/; ps aux | grep -i n0de | grep -v grep'"
   }
 }

← b43759b add fleet-sweep hardcoded-credential leaks card (4 creds + d · back to Security Dashboard · auto-surface live tokens also hardcoded in code to top of ro c5b2a58 →