ً

🥷🏼

[Dmitriy Kovalenko @neogoose_btw]

fun fact: you can also do

setTimeout(“debugger”, 3000)

[Fuma Nama @fuma_nama]

Confirmed the fuma-content repository was affected by Shai-Hulud:
- it happened likely during the transition to pnpm v11 (which should disable any postinstall scripts unless explicitly allowed), the postinstall script in affected Tanstack Start packages was triggered while pnpm was still v9.
- there's no affected versions of following being published (from what I have verified manually): fuma-content, fumadb, fumadocs. I suspect it's because (1) .npmrc file only contained hoist options (2) pnpm v11 was used since then. (3) I don't use Claude Code. It's possible that I overlooked some versions/packages, but all recently published package versions are manually verified.
- fuma-content is already deprecated, repo history is kept to analyse the cause.
- my machine has finished factory reset, all secrets are revoked, this will cause some sites to break temporarily. Will be back soon once I get more information & some sleep.

[ً @user2jz]

@fuma_nama Sweet, thanks for moving on this so quickly

[ً @user2jz]

Hi @fuma_nama, your repository got compromised with the malicious Shai-Hulud setup script. I encourage you to take quick action

Commit: https://t.co/RILV6UWNTI

[Fuma Nama @fuma_nama]

Soon on Fumadocs: new translations API + official language packs

[ً @user2jz]

@mattpocockuk yup, using posthog feature flags

[ً @user2jz]

basically https://t.co/pgXNxatbeL's business model

[Akash @Akasheth_]

meanwhile people are debating $20 subscriptions

while some devs are burning 100M+ GPT tokens for the price of lunch through proxy markets

[ً @user2jz]

Never use a claude code prompt without /grill-with-docs by the way

[kache @yacineMTB]

Never use a codex prompt without /goal by the way

[ً @user2jz]

@vxunderground they're still creating repos on hacked accounts

[ً @user2jz]

@mattpocockuk try running `npx skills@latest add handwriting`

jk matt :D

[La Razón @larazon_es]

❌ Se acabaron los "daños colaterales" de Javier Tebas: el Congreso frena los bloqueos indiscriminados de IPs por parte de LaLiga.

➡️ Tras años de bloqueos masivos sin control, se impondrán límites para que el Internet español no se paralice cada... https://t.co/7VhELVmOtK

[Matt Pocock @mattpocockuk]

This weeks' skills changelog:

- /ubiquitous-language deprecated, use /grill-with-docs instead
- /grill-with-docs for codebases, /grill-me everywhere else
- Skills can now be used with any issue tracker
- Experimental /diagnose and /triage skills

[ً @user2jz]

@mattpocockuk it sometimes outputs the options using the super nested labels directly (A2.1.b.i, A2.1.b.ii, A2.1.b.iii, A2.1.b.iv …).

it makes it a bit tough to read and reply to cleanly, although not a big deal

[ً @user2jz]

it's been 10 years since µWebSockets (𝚞𝚆𝚜) released

imo one of the most underrated yet more powerful libraries out there

[ً @user2jz]

@PunGrumpy @cursor_ai Same issue for me @cursor_ai

[ً @user2jz]

@benln favorite key ⌨️

[ً @user2jz]

@benln everyday, locked in 🎯

[ً @user2jz]

claimed the 100$ credit on cursor's cloud agents to ship even faster 🐐

currently using cloud agents to tackle high impact pending tasks in my backlog, while in parallel I keep building with the desktop app, honestly it feels amazing

[ً @user2jz]

@initjean damn

[ً @user2jz]

bike ride + late night coding session, name a better plan :)

[jo johnson @josbjohnson]

a person who commits to something for a thousand days straight becomes a force that most people will encounter once in their lifetime and never forget. a thousand days. hardly anyone can commit to something for thirty. which means the field thins dramatically by day sixty. and by day two hundred you are essentially alone. and by day five hundred the results have started compounding so aggressively that people will use the word talent to describe what is actually just the accumulated residue of a person who refused to leave the room.