The 2nd edition of my "React Key Concepts" book is available now"!
Fully updated for React 19, including brand-new chapters on RSC, form & server actions, Suspense and much more!
If you, like me, like picking up a book for learning from time to time and you're (like me), convinced that we'll still need (React) devs in a couple of years, this book will be perfect for you!
PLUS: There are special bonus offers & packages available now for the launch!
Supply chain attacks, broken code everywhere, mass layoffs that are justified "because of AI", stupid / dangerous AI-powered customer support (hi meta!), AI gurus selling you their latest skills and "must use workflows" ... glorious times :)
@devmobnow Did you send that email to support[at]academind[dot]com?
Because I canβt find any recent emails on that topic there. Please send another one and include the last four digits of the credit card you used (and / or transaction date + email used if you used PayPal)
π¨ BREAKING: Socket is investigating an active npm supply chain attack compromising hundreds of packages in the @antv ecosystem.
The malicious publish wave appears tied to Mini Shai-Hulud and packages connected to the npm maintainer account atool.
Cloudflare's security team spent the last few weeks testing Anthropic's Mythos against fifty of our own repositories. What we learned about offensive AI, why faster patching is the wrong reaction, and what the architecture around vulnerabilities has to look like next. https://t.co/RSrRtIhgaV
Supply chain attacks are becoming more frequent - obviously also because of AI (easier to look for vulnerabilities, write malicious code AND more targets!).
But imagine the fun you'll have once you got the first compromised AI agents going rogue on your systems...
Not a question of IF ... just WHEN
No month (week?) without a new huge supply chain attack.
We'll see more of those. AI obviously helps with finding attack vectors, creating malicious code, and escaping security mechanisms.
But maybe more importantly, attacks are just so, so much more worth it. More software than ever is being written by more people than ever not knowing anything about what they're doing (or not caring).
I'm pretty sure being an OSS maintainer has never been less fun. You're getting swamped by AI slop PRs and issues AND have to try to defend against malicious attacks like the one that's currently rolling over the npm and Python ecosystem.
Think I hate on X:
- "someone just did xyz"
- "many such cases"
- "not trying to be mean, just genuinely interested"
Sorry, had to get that off my chest π