Rohit Roy

Software Engineer @Google

[Rohit Roy @_iamroy_]

Most people use AI as a chatbot.

Power users use it as an operating system.

Every repetitive task becomes a workflow.
Every workflow becomes leverage.
The gap between the two groups is compounding fast.

[Rohit Roy @_iamroy_]

Spent days investigating a conversion drop.

GA4 showed users were dropping off, but not why.

@msftClarity revealed users were repeatedly clicking the "Install" CTA from an in-app webview where PWA installation isn't supported.

1 session replay uncovered what analytics missed.

[Rohit Roy @_iamroy_]

Vibe code until it breaks.

Then earn your engineering degree.

[Rohit Roy @_iamroy_]

🤯

[Rohit Roy @_iamroy_]

This is the new normal for software development and it’s scary!

[Aikido @AikidoSecurity]

Update 5:05 PT: The attack has now expanded well beyond @TanStack and @Mistral.

373 malicious package-version entries across 169 npm package names, including @uipath, @squawk, @tallyui, @beproduct, and more.

The malware propagates by stealing your CI credentials and using them to publish new compromised versions.

Full IOCs, affected package list, and detection steps: https://t.co/jWG9DUCu3x

[Rohit Roy @_iamroy_]

Every week AI gets smarter.
Every week Alexa forgets something new.

[Rohit Roy @_iamroy_]

Distribution >> Ideas >> Execution

[Rohit Roy @_iamroy_]

This is exactly why vibe coding scares me a little.

You can ship fast without understanding what's running under the hood. But when something like this hits, not knowing your stack isn't a vibe anymore. It's a liability.

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Rohit Roy @_iamroy_]

Boarded a flight to Varanasi and genuinely shocked, feels like half the plane is international tourists.

India’s spiritual capital isn’t a hidden gem anymore… it’s a global magnet. 🌍✈️

[Rohit Roy @_iamroy_]

https://t.co/WxDUwyiFTP

[Rohit Roy @_iamroy_]

Such kind of road construction should be criminalised.

[Rohit Roy @_iamroy_]

AI didn’t make ideas cheap.
It exposed how rare good ones actually are.

[Rohit Roy @_iamroy_]

The best article you'll read on X

[DAN KOE @thedankoe]

https://t.co/7l7Jef99QZ

[Naval @naval]

If you aren’t getting happier as you get older, you’re doing it wrong.

[Rohit Roy @_iamroy_]

This is so cool!
https://t.co/tBmCLg79NQ

[Rohit Roy @_iamroy_]

My cook’s "Bhaiya aaj kya banega?" gave me daily anxiety.

So I over-engineered a fix using Google Sheets + Apps Script. 🛠️

The Ask: Does anyone know of an existing MCP Server for @letsblinkit /@ZeptoNow /@instamart_it ?

I want my AI agent to auto-fill the cart🛒

[Rohit Roy @_iamroy_]

Antigravity + Claude Sonnet 4.5 🔥🔥🔥🔥

[Rohit Roy @_iamroy_]

The hardest part of building software in 2026 isn’t coding.
It’s deciding what not to build.

[Rohit Roy @_iamroy_]

@kanavtwt Antigravity >>>

[Rohit Roy @_iamroy_]

@rumilyrics Exercise