Another nasty supply chain attack just dropped and it's moving fast. ⛔
This one's being called "Mini Shai-Hulud" and it's targeting the @tanstack ecosystem (React Query, Router, Table, etc. — libraries a ton of us use daily).
In just minutes, attackers pushed 84 malicious versions across 42 packages. The worm is clever: it uses GitHub Actions cache poisoning, steals tokens, hunts for secrets on your machine (GitHub, AWS, GCP, etc.), and can spread to other packages you maintain.
Even scarier — it includes a dead man's switch. If you revoke the stolen GitHub token/API key, the malware can trigger and wipe your home directory or delete everything.
Just spent the whole weekend playing with Poolside/laguna-m.1 and honestly? It’s stupidly good for being completely free.
It’s a 225B MoE (23B active) that’s crushing agentic coding tasks without costing me a single cent.
context window is 131k (solid but not the biggest out there), and max output is around 8k tokens. Still more than enough for most agentic flows I’ve thrown at it.
It’s not trying to kill Claude or GPT — it’s just showing up, doing the work, and being weirdly competent.
Highly recommend. You can use it through Kilo Code (which I personally prefer) or OpenRouter.
Go try it before the “free” tag disappears 👀
Looking for early adopters running WooCommerce stores to join a beta for an AI data insights product.
Interested? Contact me to get an invitation. Invites go out next week. #WooCommerce#ai#wordpress
*** THE TRUTH ABOUT SEO & WHY I STOPPED RELEASING SEO TRAININGS ***
If you spend long enough in SEO, you should come to the realization that the best SEO for legitimate, long-term businesses is just brand building. And brand building is driven primarily by every other tactic/technique not named SEO.
At the end of the day, “doing SEO” is the act of implementing specific techniques and tactics based on today’s best guesses of how an algorithm is operating, in an effort to circumvent the need for brand.
I don’t think this is really debatable. You have to “do SEO” if you don’t have the brand power to rank naturally. If you have a top brand in a market, you don’t have to “do SEO.” The proof for this statement is that top brands get away with all the technical SEO “mistakes” because search engines still know they’re of top relevance and will serve them as a result anyway.
Imagine you’re a local Italian restaurant. You can get to the #1 spot by:
1) Never “doing SEO” and instead focusing on all the things a best Italian restaurant would be, say, and do as a brand/business.
2) Doing a bunch of SEO tricks to rank for “Italian food near me” for however long you can last until Google realizes you’re not actually worthy of the top 3 spots. And if you are worthy, then you don’t need all the tricks/effort to rank in the first place.
Now, I'm not saying that $10,000 invested in SEO is $10,000 wasted. You can move pixels on analytics charts. You can potentially expedite a company’s success, provided they do everything else right. You can also expand a company's digital footprint, which has solid payoffs.
BUT, where that $10,000 used to pay off with 90% efficiency, it only pays off with 40% efficiency or less today. Organic SERP real estate is shrinking dramatically and will only continue to shrink and SERPs are only getting more and more competitive.
The conclusion is: It’s becoming a poorer and poorer choice for where to invest those dollars, especially when you understand that BRAND always wins over SEO tactics. Any examples of this not being the case are temporary outliers.
Now, here’s the kicker. What most “SEO experts” won’t admit or disclose to clients is that a business can get to the #1 spot without ever “doing SEO.”
In other words, the $10,000 that’s only used at 40% efficiency could be spent on other things that will pay off with much greater efficiency, and more exponentially.
This runs contrary to what most businesses think and are told. Companies are misled into believing that “doing SEO” is a requirement to rank well. It’s not. They can absolutely invest that money into other key areas of marketing and brand building and move the SEO needle in the absence of an SEO expert.
(And no, you don’t need an SEO expert to make your H1 say “Italian Restaurant in Fucksville, Utah” instead of “Welcome.” That’s not doing SEO, that’s checking a very low-hanging, no-skill-needed box. So don’t come back at me with, “Basic on-page is still important!”).
Again, this doesn’t mean SEO is useless or completely unproductive. But I’ve shifted my consulting recommendation away from SEO, to other means of marketing and brand building. And when I’m consulting agencies/freelancers on what to sell/focus on, I now recommend against SEO as primary offer.
Businesses should be interested in playing the real game of … BUSINESS … and stop dumping so much money into the side quest of feeding algorithms. Search engines want to serve the best result. So … get this … hear me out … just cut to the fucking chase and BE THE BEST RESULT.
I’ve been searching for an interactive screen recording tool for my WordPress tutorials, Most of the great ones are Mac-exclusive.
@cursorful is an awesome browser extension that works perfectly on Windows too. Highly recommend checking it out! 🙌 #tutorials#screenrecording
One of the most promising Plugin in the WordPress market right now has to be Vendbase by @uipressdotco and @markuipress.layout and usability are just top-notch, making it a pleasure to work with. And the best part? It’s only getting started! #Vendbase#WooCommerce#WordPress