Rajesh Sharma

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that: • Deobfuscates embedded payloads and operational strings at runtime • Dynamically loads fs, os, and execSync to evade static analysis • Executes decoded shell commands • Stages and copies payload files into OS temp and Windows ProgramData directories • Deletes and renames artifacts post-execution to destroy forensic evidence If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

🚨𝘽𝙍𝙀𝘼𝙆𝙄𝙉𝙂: European Commission President Ursula von der Leyen unveiled EU–INC, a new framework that lets you launch a company in 48 hours for under €100 Starting a company across the EU today = 27 legal systems, 60+ company structures 🤯 That might be about to change… The European Commission just introduced 𝗘𝗨 𝗜𝗻𝗰., a new optional corporate framework designed to make Europe actually function like one market. Here’s what stands out: → Set up a company in 48 hours → Cost: < €100 → Fully online, no minimum capital → One single framework across all EU countries → Easier share transfers & fundraising → EU-wide employee stock options (huge for talent) Especially the EU-wide stock option plans, taxed only when employees actually sell (instead of when granted) is huge. This makes it far easier for startups to attract and retain top talent, finally putting Europe closer to the US playbook. Source/More info: ec.europa.eu/commission/pre… In short: This is Europe trying to compete with the simplicity of a Delaware C-Corp 🇺🇸 And honestly… it’s long overdue. For years, European founders had 2 choices: 1. Stay local and deal with fragmentation 2. Move to the US to scale 𝗘𝗨 𝗜𝗻𝗰. is trying to remove that trade-off. If executed well, this could be one of the most important structural changes for European startups in decades. What do you think?

@Rainmaker1973 I thought that was a starship landing 🤔

During 2020 covid lockdown,,air pollution got reduced significantly that Mt. Everest was visible from Kathmandu located around 120 miles away

Dont trust claude code when it says certain terraform update wont restart your server 🤦‍♂️

@Cloudflare 8848

Let's talk ports. Aside from 80 and 443 what is your favorite networking port and why? #CloudflareChat

@nirajbhusal I was showing my license to a traffic police, when it logged me out. Now i cannot log back in at all. Was that related to the recent update?

You can now screenshot your Voter ID from Nagarik App Nagarik App (v2.0.90) has enabled Voter ID screenshots ahead of the House of Representatives Election. No physical Voter ID card? This is your backup. - You can now screenshot your Voter ID from the Nagarik App - Print the screenshot and carry it to the polling station as a supportive ID Remember: mobile phones are NOT allowed inside polling stations so print beforehand You can also verify your voter registration here: election.gov.np/np/page/voter-…

17,000 tokens per second!! Read that again! LLM is hard-wired directly into silicon. no HBM, no liquid cooling, just raw specialized hardware. 10x faster and 20x cheaper than a B200. the "waiting for the LLM to think" era is dead. Code generates at the speed of human thought. Transition from brute-force GPU clusters to actual AI appliances. taalas.com/the-path-to-ub…

@saltyAom Is that just a javascript problem?

There should be a way to abort promises in JavaScript There's no way to stop running promises at all? Like, what if the client aborts the request? The function is still running, the database query is still going Wasted resources

@OpenAI something happened 🤔

@Sedhai007 This is exactly what I'm thinking! Are they really appreciating or fishing engagement!

The EU is building a European alternative to American big tech infrastructure No more Google Cloud, AWS or Azure in Europe But before we build, regulation is needed of course I was personally consulted on the architecture, here is what to expect: 1. All code must be written in French 2. American citizens will be banned from viewing EU-hosted websites 3. If an American visits your website, the CEO is personally liable and faces up to 3 years in prison 4. Server uptime guaranteed at 65% (engineers will not work nights or weekends) 5. Maximum file upload size: 25MB 6. Projected capacity: enough to host 50 HTML websites Google and Amazon are absolutely cooked The era of Silicon Valley is over

Software engineering 101 Getting your primitives right opens up unlimited possibilities But getting the primitives right is unlimited pain!

Anyone else out there vibe circuit-building?

jQuery 4 is here!!!

All of this is a precursor to ads. The challenge of commerce is not, “how can I source product information into a feed?” It is: “How can I choose which among many competing products to source into a feed?” The mechanism that facilitates that is an auction.

Shopify is building the foundation for agentic commerce. Universal Commerce Protocol, which we co-developed with Google, is now live. UCP will make it faster for agents and retailers to integrate. It’s open by default, so platforms and agents can use UCP to start transacting with any merchant. Major retailers are already using it. Agents can handle everything from discovery to fulfillment, and support things like discounts, subscriptions, and loyalty programs. We’ve accounted for all types of commerce.

Ok. Now im affected by @Cloudflare being down

Anthropic is acquiring @bunjavascript to further accelerate Claude Code’s growth. We're delighted that Bun—which has dramatically improved the JavaScript and TypeScript developer experience—is joining us to make Claude Code even better. Read more: anthropic.com/news/anthropic…

AI agents are a force multiplier for your skill level in any particular field. This is why the argument of “don’t learn engineering because of AI” is bogus. This will basically be true in most areas of work. Those that deeply understand their field will always have the leg up because they understand what’s happening behind the scenes, they know when to intervene with the agent, they can make judgment calls about what works and what doesn’t. And what’s great is that AI will make it easier than ever for people to start getting into any new field of work, especially coding or design, so they can decide if it’s a space they actually enjoy and are good at.

turns out, senior engineers accept more agent output than juniors. this is because: - they write higher-signal prompts with tighter spec and minimal ambiguity - they decompose work into agent-compatible units - they have stronger priors for correctness, making review faster and more accurate - juniors generate plenty but lack the verification heuristics to confidently greenlight output shows that coding agents amplify existing engineering skill, not replace it