Stopped paying 6 different vendors and moved everything to a single VPS for €11.75/month.
Here's what I gained and what I had to give up.
https://t.co/SF1469yNP8
#Vercel#Saas#VPS#Coolify#DevOps#Selfhosting
🤨 People keep asking how to protect yourself.
#1: set min-release-age=7 in .npmrc
#2: install Socket for GitHub (it's free!) to protect PRs from bad dependencies: https://t.co/D9bsRJj65R
#3: install Socket Firewall (also free!) to protect your laptop: https://t.co/u1NRD57PQ8
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.
This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.
Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:
• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence
If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
Open-source game engine Godot is drowning in 'AI slop' code contributions: 'I don't know how long we can keep it up'
Many submissions contain nonsensical code changes, fabricated test results, and overly verbose descriptions typical of LLM output.
Reviewing every new contributor's PR has become extremely time-consuming and demoralizing.
Rémi Verschelde stated they may not be able to sustain the current level of manual vetting much longer.
Looking to start learning C#?
This @ThePracticaDev article takes you through the basics of C#; from setting up your environment to writing code effectively and writing your first program. 📖 https://t.co/LHN0KBJSfZ
I've always wondered what it would be like to combine useEffect with a pattern matcher like ts-pattern.
Much easier to represent sequences of effects this way - where only one effect can run at once.
Big News 🚨
Microsoft just launched Teams premium powered by ChatGPT at just $7/month 🤯
With ChatGPT, Teams users can generate automatic meeting notes, AI-recommended tasks, personalized meeting templates, and a lot more!!