I love how both codex and claude are both amazingly eager to poke holes into each other's specs during adversarial reviews, but then when they have to actually code the stuff they forget half the spec or half implement it.
Since this is happening daily at the moment, a simple thing you can do to help your clanker (or you) to avoid pulling compromised npm packages is to force them to be at least 48h old. And pin versions ofc.
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.
This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.
Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:
• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence
If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
I’m dead 💀
Wow, Germany has officially launched an alternative to Claude Code klausprogrammieren.com A fully compliant Tool in collaboration with Deutsche Telekom and the Federal Ministry of Digital Affairs.
This is a very important step for an independent Europe with sovereign tech.
Today I was like a martian in a local apotheke, the frau had never seen the eRezept app in her life, I had to reassure her it was the official one from the Gesundheitsministerium, and she gasped when she scanned the QR and it worked. Then came Apple Pay... EVEN more gasping!
The most Frutiger Aero urinal I’ve ever seen. Even the text on it is reflective of the optimism of that era.
Cannot unsee the misaligned buttons slightly to the left on iOS 18 CarPlay. Happens in multiple apps so I don’t think it’s app dependent.
So iOS 18 beta 3 is going great, today I lost the emoji keyboard and there’s no way to get it back. Tried rebooting, removing/readding it, disabling stickers, it’s just empty.
Sure it sucks to be European sometimes… bloomberg.com/news/articles/…