The Amazed Coder

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

@wono_strategy @Airbnb I went through something similar, got a refund. The next step for @Airbnb is to delete your negative review if you leave one. Host is still out there with his 5 stars.

For a decade, I thought Airbnb would protect us if something went wrong. That was until the life of my son was in play and they sided with the host. If you trust @Airbnb, don't learn the hard way like I did. Here's my story:

Kimi K2 seems smarter than Grok 4 already

@DotCSV este

🔴 ¿TIENES UN PROMPT MUY DIFICIL? ¡Te necesito! 🫵 Tenemos un problema... Estoy volviendo a probar los "prompts difíciles" que me pasasteis hace sólo 10 meses –justo antes de la salida de los modelos razonadores– y o3 se ventila la mayoría! Y el problema es que quiero poner a sudar a su versión más potente: o3 Pro 🔥 ¿Qué necesito de vosotros? Quiero que me paséis los prompts más difíciles que tengáis. Aquellos que creáis que o3 pro no podría resolver o que hayáis comprobado que o3 no consigue solucionar. ¿Un problema matemático a nivel de doctorado? ¿Un acertijo imposible? ¿Tu declaración de la renta? 1️⃣ Responded a este tweet con vuestro prompt redactado (+ imágenes si es multimodal). 2️⃣ Comprobad que el problema está bien definido: Se puede resolver sin ambigüedad. 3️⃣ Incluid la respuesta en el tweet para poder comprobar su solución :) ------ Aparte de esto, incluiré más adelante a este hilo alguna de las soluciones que en septiembre 2024 nos parecían SÚPER DIFICILES y que ahora la IA puede resolver. Visto así, es impresionante todo lo que se ha avanzado en menos de 1 año 🔥

@sama confirmed

chatgpt has gotten way, way faster on the web! lots of hard work from the team to make this happen.

Vibe coding in 2005

Ojo con promos multiempresa. Ofrecian 2x3 días de Lolla y un voucher de Samsung, pero solo me dieron 2x1 día y nada del voucher. Como eran 3 empresas, se pasaron la bola entre ellas y nadie sabe nada. Ya estoy con la denuncia en el COPREC. @PersonalFlow_At @PersonalAr @SamsungArg

Just tried Bun on a Next.js app. Installing node_modules with a warm cache is 13x faster than npm. Super impressive.

$ git push -force

Computer Networking Notes

Tip: In @ChromeDevTools you can now hide network requests from Chrome extensions! 😍 Huge for focusing on just your code when profiling performance.

Tip: @ChromeDevTools now shows human-readable HTTP status codes! Useful to 👀 what happened to a network request much quicker.

Heres another neat use case for CSS :has() When you hover over a table cell, select the other table cells in that column.

Did you know CSS has a previous element selector? You can use :has() to select items when the the next item is in a specific state. Here we select the elements before and after the currently hovered row. Nifty 👌

Which programming language has the worst syntax???

I will admit, TS enums are kind of useful. But only for one specific case. Let's say you only want to log a message if it's a warning or error: You get to use the beautiful `level > LogLevel.Debug` to express it - which is real tasty. You can, of course, do this with a normal 'as const'. But in this situation, I'll choose the enum.

How To Access Incognito History

This joke might only land with frontend developers 😂

WinRAR Flaw Lets Hackers Run Programs When You Open RAR Archives it.slashdot.org/story/23/08/18…