May Lau

Mobile Developer (Flutter and Android)

[Miguel Ángel Durán @midudev]

Si estás usando npm install, estás en peligro.

¡Así de crudo te lo cuento para que reacciones!

Ayer se comprometieron paquetes de TanStack en npm.
De las bibliotecas más usadas en el mundo JavaScript.

Y de ahí saltó a Mistral, OpenSearch, UiPath, PyPI...

Porque muchos ataques no necesitan que importes nada. Basta con una instalación para infectarte.

¿Cómo?
Colando scripts como preinstall o postinstall que se ejecutan durante la instalación.

Lo importante es que tiene solución:
① Usa pnpm 11
Viene con defensas por defecto contra este tipo de ataques.

② Si sigues usando pnpm 10, npm, yarn o bun
Activa minimumReleaseAge y ponle 1440.
Evita instalar versiones publicadas el mismo día.

③ Bloquea scripts de instalación por defecto
pnpm evita que cualquier dependencia ejecute código en tu máquina solo por instalarla.

Por favor, comparte esto para que le llegue al máximo número de personas y paremos la cadena de ataques.

[May Lau @MayLauDev]

@pookieskuroda クロダさんの作品です、どういう風に表現するのが一番のは、原作者の自由どう思います。

[Jaewoong Eum @github_skydoves]

As of AGP 9.0 missing proguard files will throw a runtime exception.

https://t.co/M9gKmdY6pS

[Ryan Chenkie @ryanchenkie]

⚠️ Developers, please be careful when installing Homebrew.

Google is serving sponsored links to a Homebrew site clone that has a cURL command to malware. The URL for this site is one letter different than the official site.

[Remi Rousselet @remi_rousselet]

When you're facing a coding problem, make sure to include some pseudo code of the problem.

Oftentimes, English isn't good enough to explain code issues.

[Wise @trikcode]

Confirm! 😀

[Coding and Cats @codingandcatss]

If a terrible production bug happens, who do you think should be the most responsible person and should be judged?
1. Developer who codes.
2. Code reviewer.
3. Tester.

[May Lau @MayLauDev]

@gozkybrain4u I either drink tea or drinks with alchol, depends on how hard and the necessity of that issue. Am i the weird one? 😯

[May Lau @MayLauDev]

@OngDevLab Bug

[Shahzad @shahzadahmad246]

A proud open source contributor 😂

[May Lau @MayLauDev]

@longngo0924 Put it as part of the keyboard is one thing, im curious why they think put it beside the delete button is a good idea😂

[devZizi @zizi_dev]

My laptop after running Android studio. 😭

[May Lau @MayLauDev]

@rhymezx_code @ground1_c2 I personally call it front-backend in microview than directly backend. It feels different to me.

[May Lau @MayLauDev]

Finally! Hope there will be something like recyclable table view in the future https://t.co/mXMljPRwRx

[Flutter France 🥖💙 @FlutterFrance]

Vous avez peut-être remarqué qu'il existe en #Flutter la notion de KeepAlive, généralement autour de listes. Si le concept vous est toujours apparu comme obscur, vous avez ici une excellente explication de @MayLauDev.

https://t.co/uyMrLKIDd4 #flutterdev #flutterio

[May Lau @MayLauDev]

Playing Around with ShapeBorder
{ by @MayLauDev } from @hashnode

Notes for flutter shape border

#flutter https://t.co/b6usZvH61G

[May Lau @MayLauDev]

Personal Thoughts on Flutter Chart Packages
{ by @MayLauDev } from @hashnode

Flutter chart packages and plugins review

#flutter #chartinglibrary https://t.co/eQkGcLMYid

[May Lau @MayLauDev]

Google Drive App Data Backup
{ by @MayLauDev } from @hashnode

Backing up app data with flutter mobile app to Google drive

#flutter https://t.co/fhl9lT3UHv

[May Lau @MayLauDev]

Google SignIn without Firebase
{ by @MayLauDev } from @hashnode

Guide to handle Google Login without using Firebase

#flutter #authentication https://t.co/f0LNOWtvpl

[May Lau @MayLauDev]

Close App Confirmation Behaviour
{ by @MayLauDev } from @hashnode

Just share some platform specific handling and information.

#flutter https://t.co/nfleZgc7ZK