🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

For a decade, I thought Airbnb would protect us if something went wrong. That was until the life of my son was in play and they sided with the host. If you trust @Airbnb, don't learn the hard way like I did. Here's my story:

Kimi K2 seems smarter than Grok 4 already

Vibe coding in 2005

Ojo con promos multiempresa. Ofrecian 2x3 días de Lolla y un voucher de Samsung, pero solo me dieron 2x1 día y nada del voucher. Como eran 3 empresas, se pasaron la bola entre ellas y nadie sabe nada. Ya estoy con la denuncia en el COPREC. @PersonalFlow_At @PersonalAr @SamsungArg

Just tried Bun on a Next.js app. Installing node_modules with a warm cache is 13x faster than npm. Super impressive.

$ git push -force

Computer Networking Notes

Tip: In @ChromeDevTools you can now hide network requests from Chrome extensions! 😍 Huge for focusing on just your code when profiling performance.

Tip: @ChromeDevTools now shows human-readable HTTP status codes! Useful to 👀 what happened to a network request much quicker.

Heres another neat use case for CSS :has() When you hover over a table cell, select the other table cells in that column.

Did you know CSS has a previous element selector? You can use :has() to select items when the the next item is in a specific state. Here we select the elements before and after the currently hovered row. Nifty 👌

Which programming language has the worst syntax???

I will admit, TS enums are kind of useful. But only for one specific case. Let's say you only want to log a message if it's a warning or error: You get to use the beautiful `level > LogLevel.Debug` to express it - which is real tasty. You can, of course, do this with a normal 'as const'. But in this situation, I'll choose the enum.

How To Access Incognito History

This joke might only land with frontend developers 😂

WinRAR Flaw Lets Hackers Run Programs When You Open RAR Archives it.slashdot.org/story/23/08/…

❌ You 𝗺𝗶𝗴𝗵𝘁 not need a react form library ✅ Instead you can use the FormData API's

What is the output of the following Python code?

Google is launching their own online dev environment called IDX and I just got access It looks like hosted VS Code VM. Similar to stackblitz, replit, Github Codespaces, codesandbox etc.. At what point we move to "thin client" and start doing our dev remotely?