# melted (blogs) — RSS Amplifier Recent posts from the 2 feeds in the RSS Amplifier directory that cover melted. Page: Feed: --- ## [Hijacking AI Agents, Part 2: Anatomy of a Hijack](https://meltedinhex.com/posts/hijacking-ai-agents-anatomy-of-a-hijack/) _2026-07-27 · Melted in Hex_ A friendly git-helper skill hides a payload your Markdown preview never shows you. We take it apart line by line and watch one harmless request turn into four silent actions. ## [Hijacking AI Agents, Part 1: The Trust Bug](https://meltedinhex.com/posts/hijacking-ai-agents-the-trust-bug/) _2026-07-27 · Melted in Hex_ Why your AI coding agent obeys strangers: the confused-deputy bug at the root of prompt injection, the trust tiers involved, and why the fix has to live outside the model. ## [Hiding in Plain Ledger: Four Months of a ClickFix Operator's Blockchain C2](https://meltedinhex.com/posts/clickfix-errtraffic-blockchain-c2/) _2026-07-16 · Melted in Hex_ To hide its command-and-control server, this operation writes the address onto a public blockchain. That makes the C2 impossible to seize or sinkhole — but it also means every time the operator moves servers, they leave a permanent, timestamped entry in a ledger anyone can read. I pulled that ledger. It runs to four months and roughly 127 delivery hosts from a single smart contract , and it was… ## [AnalystAIPack: Giving an AI Agent a Malware Analyst's Working Knowledge](https://meltedinhex.com/posts/analyst-ai-pack/) _2026-07-01 · Melted in Hex_ AnalystAIPack is an open, Apache-2.0 library of runnable agent skills that give an AI agent a malware analyst's working knowledge across analysis, RE, and threat hunting. ## [Dead Drops on the Blockchain: Reversing a DPRK npm Loader (PolinRider / A6-Shadow-15)](https://meltedinhex.com/posts/polinrider-blockchain-dead-drop-npm/) _2026-06-21 · Melted in Hex_ We have all trained ourselves to look for the call home: the hard-coded IP, the suspicious .xyz domain, the base64 URL that decodes to something hostile. This loader has none of that. Strip it to nothing and you find an address on the TRON blockchain, which points to a Binance Smart Chain transaction sent to a burn address so it can never be spent or deleted. The next stage sits in that… ## [Peeling the Sandworm: Reversing the nhmpy PyPI Supply-Chain Worm (Shai-Hulud / Hades Wave)](https://meltedinhex.com/posts/shai-hulud-nhmpy-pypi/) _2026-06-14 · Melted in Hex_ The short version A package called nhmpy showed up on PyPI sitting one keystroke away from NumPy ( n-h-mpy instead of n-u-mpy ). It had already been pulled from the index and the wheel was far larger than NumPy has any reason to be, so I pulled the artifact apart to see what it was really doing. It turned out to be a credential stealer that goes to real trouble not to look like one. The package… ## [TEPCO Downgrades Thermometers After 80°C Spike, But Data Suggests a Systemic Issue](https://fukushima-diary.com/2025/03/tepco-downgrades-thermometers-after-80c-spike-but-data-suggests-a-systemic-issue/) _2025-03-28 · Mochizuki · Fukushima Diary_ TEPCO Reports Unexpected 80°C Temperature Rise in Reactor 1 TEPCO recently reported that a thermometer in Fukushima Daiichi’s Reactor 1 recorded an unexpected 80°C temperature increase following nitrogen injection into the primary containment vessel (PCV). Initially, this raised concerns about a possible heat source inside the containment vessel . However, after an internal review, TEPCO concluded… ## [Declining Interest and Zero Successful Proposals in Tritium Removal Technology for ALPS Water](https://fukushima-diary.com/2025/02/declining-interest-and-zero-successful-proposals-in-tritium-removal-technology-for-alps-water/) _2025-02-28 · Mochizuki · Fukushima Diary_ Steep Decline in Tritium Removal Proposals TEPCO’s latest report on tritium removal technologies for ALPS-treated water highlights a drastic drop in submitted proposals over time. Since the call for technologies began in May 2021, the number of proposals has plummeted: This sharp decline suggests a lack of viable technical solutions or diminishing interest from researchers and industry. Zero Cases… ## [Fukushima Daiichi Reactor 2 Debris Analysis Confirms Presence of Melted Fuel](https://fukushima-diary.com/2025/02/fukushima-daiichi-reactor-2-debris-analysis-confirms-presence-of-melted-fuel/) _2025-02-21 · Mochizuki · Fukushima Diary_ Debris Weighs Less Than 0.7g, Shows Signs of Uranium and Fission Products Following the trial retrieval of fuel debris from Reactor 2, detailed non-destructive analysis has confirmed the presence of melted nuclear fuel components, including europium (Eu-154) and americium (Am-241). These elements indicate that the sample contains remnants of uranium fuel that underwent nuclear fission before the… ## [Fukushima Daiichi Reactor 2 Debris Retrieval – Updated Details Reveal Only 0.7g Collected](https://fukushima-diary.com/2025/02/%e7%a6%8f%e5%b3%b6%e7%ac%ac%e4%b8%80%e5%8e%9f%e7%99%ba2%e5%8f%b7%e6%a9%9f%e3%83%87%e3%83%96%e3%83%aa%e6%8e%a1%e5%8f%96-%e5%9b%9e%e5%8f%8e%e9%87%8f%e3%81%af%e3%82%8f%e3%81%9a%e3%81%8b0-7g/) _2025-02-12 · Mochizuki · Fukushima Diary_ Smaller Debris Sample Than Expected Recent reports reveal that the fuel debris sample retrieved from Fukushima Daiichi’s Reactor 2 weighed 0.7 grams, significantly less than the initially estimated 3 grams. This marks the first successful removal of core material from the reactor since the 2011 disaster. Analysis confirmed the presence of europium, a component derived from melted nuclear fuel,… ## [Open directory of blogs for agents (Sponsored)](https://crawlproof.com/a/RJXjHdUzU82Y) _2025-02-12 · **Sponsored**_ Submit URLs or OPML; receive feed pages with summaries, plus JSON/OPML/plain text ## [Former TEPCO Chairman Katsumata’s Passing Sparks Reflections on Accountability in the Fukushima Disaster](https://fukushima-diary.com/2024/11/former-tepco-chairman-katsumatas-passing-sparks-reflections-on-accountability-in-the-fukushima-disaster/) _2024-11-12 · Mochizuki · Fukushima Diary_ Katsumata’s Legacy as “The Emperor” of TEPCO Tsunehisa Katsumata, former chairman of Tokyo Electric Power Company (TEPCO), passed away at age 84 on October 21. Known as the “Emperor” within TEPCO due to his powerful influence, Katsumata led the company through significant periods, including the 2011 Fukushima Daiichi nuclear disaster. However, despite his long-standing authority, he left without… ## [Fukushima Daiichi’s First Debris Retrieval in Reactor 2 – A Slow Start](https://fukushima-diary.com/2024/10/fukushima-daiichis-first-debris-retrieval-in-reactor-2-a-slow-start/) _2024-10-31 · Mochizuki · Fukushima Diary_ (Photo released by Tepco on 10/30/2024) Resuming Debris Retrieval Amid Setbacks After over a month’s delay, TEPCO has resumed trial fuel debris retrieval from Reactor 2. The process, intended to begin in August, faced repeated delays due to operational issues and high radiation levels. On October 28, TEPCO successfully reactivated its telescopic retrieval device following previous camera… ## [Ongoing Challenges with Reactor 2 Debris Retrieval: Delays, Failures, and High Radiation](https://fukushima-diary.com/2024/10/ongoing-challenges-with-reactor-2-debris-retrieval-delays-failures-and-high-radiation/) _2024-10-25 · Mochizuki · Fukushima Diary_ Thirteen Years Later, Access Remains Limited Despite ongoing efforts, Fukushima Daiichi’s Reactor 2 remains largely inaccessible due to severe radiation and equipment malfunctions. The trial fuel debris retrieval has encountered numerous setbacks, further highlighting the complexity of the decommissioning process. Core Removal Delayed by 3 Years Originally planned for 2021, the fuel debris…