Dominic Magnifico

New year. New Site. Check us out 🔥 houseofgiants.com

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

I'm not sure I'd want to wrap Codex into the shitty harness that is Claude Code. I'd rather just use @t3dotcodes

Before tailwind everyone was just trying to abstract CSS into their own flavor of tailwind anyway.

@kenwheeler “directly into United’s account” === the CEOs Venmo.

yeah how about fuck you

@wesbos I’ve made it.

Only cool people can reply to this

@jasonfried Not to the people who make being busy their identity, and then subsequently their excuse for everything.

Being busy is simply being busy. It's not proof of anything.

Another day another

@socsimulator @AdamAutomates @BrettFromDJ

@AdamAutomates @Magnificode @BrettFromDJ I'm here 👋🏼👋🏼

I’d bet $4,000 this brand doesn’t actually exist.

@AdamAutomates @BrettFromDJ @socsimulator

@Magnificode @BrettFromDJ @socsimulator You know why… 😂

@jlengstorf @clerk Damn, that's looking so fresh 🔥

you may have noticed some big improvements to the set in Web Dev Challenge season 3 — I want to send out a huge thank you to @clerk for sponsoring the build, and to Whit Vogel for production design. I love these updates so much 💜💜💜

The devs who'll be valuable in two years aren't the ones who prompt the fastest. They're the ones who can look at AI generated code and tell you what it does, why it does it, and what breaks if you change it. Understanding is the skill now. Not typing. Not prompting.

git worktree is a great feature for people smarter than me

View Transitions just got simpler with Next.js 16.2. <𝙻𝚒𝚗𝚔> now has a 𝚝𝚛𝚊𝚗𝚜𝚒𝚝𝚒𝚘𝚗𝚃𝚢𝚙𝚎𝚜 prop. Tag your navigation with a type, and <𝚅𝚒𝚎𝚠𝚃𝚛𝚊𝚗𝚜𝚒𝚝𝚒𝚘𝚗> picks the right animation.

@levelsio @Slasher @lukathedev This is very good.

The Quake III server is still going great! q3.pieter.com Play in your browser with the link above, I might add mobile support later too, I think all I need is to add some gamepads Allegedly we have famous Quake player @Slasher playing too now! @lukathedev updated Q3JS with some bug fixes which I pulled from his Git and now it should have less interruptions too

More in the lab 🧑‍🔬 dommagnifi.co/lab/temporal/

Working with dates in JavaScript has always been a nightmare. Because Date sucks, we needed a pile of workarounds for a 30-year-old mistake. That's why so many projects use moment or day.j. Temporal reached Stage 4 recently. Time to uninstall all those dependencies.

While contrast-color() only returns black or white, there are workarounds! If you register a new custom property, you can use style queries for full color palette customization (but make sure to test the contrast yourself!) Another technique is using the contrast-color() value inside of color-mix() to provide a tint variant. This demo shows method 1 where you can get warmer light colors and blue-tinted darks instead of pure black and white. Cons: Firefox doesn't support style queries yet so browser support is limited for now (though it is an Interop 2026 feature!).

🧪 dommagnifi.co/lab/color-mix/

I love color-mix(). Trying to derive shades and hues by eye is such a pain, and I've been guilty of eyeballing hex values for way too long. Set one color, mix it with white or black in oklch, and get hover/disabled states, dark mode tints, whatever. All from one source. 👇