tkmadeit

Grammarly for Figma ➔

[tkmadeit @tkmadeit]

here is a @figma plugin i built over the weekend, it lets you import your handwritten sticky notes into figjam in just a click!

very helpful for hybrid teams that sometimes like to use actual stickies and whiteboards.

[tkmadeit @tkmadeit]

@kitlangton @EffectTS_ @opencode would love to know how exactly Effect helped opencode be more stable and faster.

[tkmadeit @tkmadeit]

@gavinmcfarland is this change going through vite or more of style changes client side?

[Misha Kaletsky @mmkalmmkal]

Today i learned zsh can invoke a function for nonsense commands, so if you put this in your .zshrc you can just type prompts straight into your terminal

𝕔𝕠𝕞𝕞𝕒𝕟𝕕_𝕟𝕠𝕥_𝕗𝕠𝕦𝕟𝕕_𝕙𝕒𝕟𝕕𝕝𝕖𝕣() {
𝕔𝕠𝕕𝕖𝕩 "$*"
𝕣𝕖𝕥𝕦𝕣𝕟 $?
}

This is not a very good idea

[tkmadeit @tkmadeit]

@gavinmcfarland @DamiDina you are killing it Gavin!

[Gavin McFarland @gavinmcfarland]

I made a ton of improvements to drag and drop to reorder elements so now its buttery smooth.

[tkmadeit @tkmadeit]

dear @Dimillian please let me steer from the mobile app, right now I can’t help but look helplessly as the agent makes all kinds of mistakes

[tkmadeit @tkmadeit]

@vanilagy I like this api design, is there a name for it? Is this like builder pattern?

[tkmadeit @tkmadeit]

@googlegemma @osanseviero really need to build some Figma plugins with this

[miggi from figma @miggi]

A thread of @figma agent prompt examples / screen recordings I helped bring to life to get you started on automations (with 🎵 made on my OP-XY): 🧵

1.) Explore design directions
Prompt: Give me 3 style options for this design, one that's organic, one modern, and one retro.

[OpenAI Developers @OpenAIDevs]

🥅

/goal has graduated from an experiment—for tasks big and small, Codex gets your work done.

Use goal mode in the Codex app, IDE Extension, or CLI to give Codex a specific milestone, and it will keep working until it gets there, even across hours or days.

You can check in and steer, and even pause Codex along the way.

Pro tip: start side chats to understand the work that has been done so far without having to interrupt the main task.

https://t.co/e55oI6AhYM

[tkmadeit @tkmadeit]

@drewwilson same for gpt 5.5 as well! Who talks like this?

[tkmadeit @tkmadeit]

why does gpt 5.5 talk like this?

“That gives us a fixture that is actually produced by Figma, not invented JSON wearing a fake mustache.”

[tkmadeit @tkmadeit]

@skirano very cool

[tkmadeit @tkmadeit]

why does gpt 5.5 talk like this?

“That gives us a fixture that is actually produced by Figma, not invented JSON wearing a fake mustache.”

[tkmadeit @tkmadeit]

@Dimillian The reconnect button is not working at all, tapping on it doesn’t do anything.

[tkmadeit @tkmadeit]

@huntertcarver is it all day event? The drop in option confused me.

[dax @thdxr]

OpenCode's worktree feature will ship next week out of experimental once we finish one feature that pairs really nicely with it

what do you think that feature is?

[tkmadeit @tkmadeit]

@zendadddy I have noticed this as well, as more and more design tools start to use code behind the scenes all the complexity of coding bubble up as well.

[Vanilagy @vanilagy]

Mediabunny v1.45.0 now works basically everywhere 🚀

With the new @mediabunny/server extension, you get access to super-fast, hardware-accelerated media decoding and encoding on the server. Inspect, process and transform media on the server without ever leaving TypeScript.

[OpenAI Developers @OpenAIDevs]

What if your team gave standup updates, and GPT-Realtime-2 moved the tickets?

[TANSTACK @tan_stack]

SECURITY ADVISORY — TanStack npm packages
A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package.
Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down.
Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys.
If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised:
• Rotate cloud, GitHub, and SSH credentials immediately
• Audit cloud audit logs for the last several hours
• Pin to a prior known-good version and reinstall from a clean lockfile
Detection — the malicious manifest contains:
"optionalDependencies": {
"@tanstack/setup": "github:tanstack/router#79ac49ee..."
}
Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root).
Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level.
Full technical breakdown, complete package and version list, and rolling status updates:
https://t.co/Zy8qG7PA9f
Credit to the security researcher for responsible disclosure.