The Amazed Coder

Amazing code snippets and articles

[The Amazed Coder @amazedcoder]

@k1rallik

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[The Amazed Coder @amazedcoder]

@wono_strategy @Airbnb I went through something similar, got a refund. The next step for @Airbnb is to delete your negative review if you leave one. Host is still out there with his 5 stars.

[wono @wono_strategy]

For a decade, I thought Airbnb would protect us if something went wrong.

That was until the life of my son was in play and they sided with the host.

If you trust @Airbnb, don't learn the hard way like I did.

Here's my story:

[The Amazed Coder @amazedcoder]

Kimi K2 seems smarter than Grok 4 already

[The Amazed Coder @amazedcoder]

@DotCSV este

[The Amazed Coder @amazedcoder]

@sama confirmed

[Bilawal Sidhu @bilawalsidhu]

Vibe coding in 2005

[The Amazed Coder @amazedcoder]

Ojo con promos multiempresa. Ofrecian 2x3 días de Lolla y un voucher de Samsung, pero solo me dieron 2x1 día y nada del voucher. Como eran 3 empresas, se pasaron la bola entre ellas y nadie sabe nada. Ya estoy con la denuncia en el COPREC.
@PersonalFlow_At
@PersonalAr
@SamsungArg

[Houssein Djirdeh @hdjirdeh]

Just tried Bun on a Next.js app. Installing node_modules with a warm cache is 13x faster than npm.

Super impressive.

[tom ッ @tom_antok]

$ git push -force

[Security Trybe @SecurityTrybe]

Computer Networking Notes

[Addy Osmani @addyosmani]

Tip: In @ChromeDevTools you can now hide network requests from Chrome extensions! 😍 Huge for focusing on just your code when profiling performance.

[Addy Osmani @addyosmani]

Tip: @ChromeDevTools now shows human-readable HTTP status codes! Useful to 👀 what happened to a network request much quicker.

[Wes Bos @wesbos]

Heres another neat use case for CSS :has()

When you hover over a table cell, select the other table cells in that column.

[Wes Bos @wesbos]

Did you know CSS has a previous element selector?

You can use :has() to select items when the the next item is in a specific state.

Here we select the elements before and after the currently hovered row.

Nifty 👌

[John✨️ @AdemoyeJohn]

Which programming language has the worst syntax???

[Matt Pocock @mattpocockuk]

I will admit, TS enums are kind of useful.

But only for one specific case.

Let's say you only want to log a message if it's a warning or error:

You get to use the beautiful `level > LogLevel.Debug` to express it - which is real tasty.

You can, of course, do this with a normal 'as const'.

But in this situation, I'll choose the enum.

[Security Trybe @SecurityTrybe]

How To Access Incognito History

[˗ˏˋmewtru´ˎ˗ @trunarla]

This joke might only land with frontend developers 😂