Jon

Developer

[Jon @altshort]

Made my rust CLI tool for handling env vars installable via. Homebrew on macOS!

https://t.co/HkArUufpkG

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Tanner Linsley @tannerlinsley]

https://t.co/dYSm9mU6xE

[Jon @altshort]

@jacobmparis Old school pre-triangle company react - love it

[Jon @altshort]

@excalidraw @_ryan_di Perfection

[Jon @altshort]

@TauriApps Awesome! Congrats!

[Tauri @TauriApps]

Tauri 2.0 Stable. Out now. Read more:
https://t.co/wbxWxFpUCj

[Jon @altshort]

@rauchg Handling loads of customer tracking / analytics scripts; especially heavy-handed stuff like hotjar

Since most ecom parts of the biz will ask for those to be added

[Jon @altshort]

@gao_jude @nextjs Ah that did sound brutal in the write-up 😱 impressive effort!

[Jon @altshort]

@excalidraw @mtolmacs Just tried this - tbh preferred the old behaviour, but it's not much of a problem really - thanks for the updates ❤️

[Jon @altshort]

@coding_garden Other videos in the series were pure quality - have been looking forward to this one 🚀 thanks for making these CJ!

[CJ (Coding Garden) @CodingGarden]

I spent the last 2 weeks using and learning everything I could about @coollabsio 's Coolify, a self hosted PaaS being built in public by @heyandras

I documented everything in my latest video in the Self Host 101 series over on @syntaxfm

Watch ���: https://t.co/rYd01qgaii

[Jon @altshort]

@heypresents @joshnesbitt @imahomeglobal @GleanNotes @WRKdigital @zeroheight @ohhelloana @heldiney @monzo @CoopDigital Missing this year 😭 But have a good one! (It always is 🚀)

[Jon @altshort]

@housecor @ApiMocking Cookie with options in e.g. `serviceA_fail&serviceB_empty`

Works in local dev & automation without extra tooling

[Jon @altshort]

@ApiMocking The new API really is a nicer DX. Thanks for all the maintainers' work on this. Docs for the migration are really thorough! 🙌♥️

[Ben Holmes @BHolmesDev]

The perfect abstraction doesn't exi

[Jon @altshort]

@kevinpaxton82 MSW handles GQL quite well - good shout. Their upcoming API change makes composition a little neater too https://t.co/BLHfdY1rit

Parrot is pretty decent too if you need a standalone server rather than in-process - https://t.co/3IoYbp5oAR

[Jon @altshort]

@jecfish @addyosmani @ChromeDevTools Any restrictions on where this feature is available (e.g. localhost only)? Thinking quite a few client-side apps will need accommodate more users being in unexpected states if not

[Jon @altshort]

@hostedby20i @dibiconf For pure usability Excalidraw is top of the list for me. Open-source, local data storage and powerful export options. https://t.co/2ApckbHPMQ