🚨 Emergency DevSec Station Drop
There's an active npm supply chain attack happening right now. Compromised packages are stealing SSH keys, AWS credentials, GitHub tokens, browser passwords, and crypto wallets on install. Then using your publish token to infect every package you maintain.
One command can protect you immediately: npm config set ignore-scripts true
1/2
Fun #JavaScript bug with "default parameters".
`null` values are considered "defined" so they won't be replaced with defaults unlike values set to `undefined`.
```
function example({something='default'}) { return something }
example({}) === 'default'
example({something: undefined}) === 'default'
example({something: null}) === null
```
I developed an AI model that is so dangerous to the plumbing industry that I am not going to be able to release it to the public.
Occult Enby that's making local-first software with peer to peer protocols, mesh networks, and the web.
Yap with me and send me cool links relating to my interests. 👍