Developer Avocado 🥑

When bro’s code is full of well-written comments and he pushes to development much faster than before.

I always knew the spice must flow, but I didn't think it would be in the form of my personal credentials

A screenshot of compromised credentials being published as GitHub repositories appended with the name "Shai-Halud."

a picture from the movie "Dune" showing a giant sandworm emerging out of the desert and towering down on two humans below.

Breaking, new, by me:

Self-replicating "Shai-Hulud" worm hits 180+ Software Packages

At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that steals credentials from developers and […]

[Original post on infosec.exchange]

Mitigating supply chain attacks | pnpm Sometimes npm packages are compromised and published with malware. Luckily, there are companies like [Socket], [Snyk], and [Aikido] that detect these compromised packages early. The npm registry usually removes the affected versions within hours. However, there is always a window of time between when the malware is published and when it is detected, during which you could be exposed. Fortunately, there are some things you can do with pnpm to minimize the risks.

Published an article about mitigating supply chain attacks with pnpm
pnpm.io/supply-chain...

styled-components maintenance mode: A 40% faster fork | Sanity After styled-components entered maintenance mode, we forked it with React 18's useInsertionEffect. Result: 40% faster renders for Linear. Open source solution.

styled-components maintenance mode doesn't have to mean panic mode.

Our engineer @codey.bsky.social made performant community forks. Linear's already seeing 40% faster renders with zero code changes.

Not a permanent fix, but it buys you time to migrate properly.

www.sanity.io/blog/cut-sty...

When bro’s code is full of well-written comments and he pushes to development much faster than before.

choose your setup 😂

Web developement seems easy untill you have to work on :

- Scalability
- CORS errors
- Production bugs
- Documentations
- Web sockets
- Time zone Handelling
- Handelling traffics
- Memory leaks
- SEO optimization
- Webpack config.
- CSS specificity hell
- Custom promises & Polyfills.

Smart move- while everyone else is fighting over water, you’ll be selling floppy disks for a loaf of bread

A chromium wrapper sold for $600M.
A VSCode fork is valued at $10B.

Yet you still want to build everything from scratch.

Find and fill the gap.

Browsers really feel like fashion cycles — we all rotate around until something breaks trust or gets abandoned. Zen does feel like a solid middle ground though, especially now that Gecko is actually keeping up with standards again.

AI will make coding faster, not irrelevant. The people who know how to code will always be the ones who know how to build.

Emergent | Build Apps with AI - no coding required Build real products with Emergent's vibe-coding platform. Emergent AI creates production-ready applications from natural language—no developers required.

Do anything with AI in 2025:

• Vibe coding: emergent.sh
• Design: recraft.ai
• Notes: superlist.com
• Code review: coderabbit.ai
• Content: outrank.so
• Test: qodo.ai
• PPT: gamma.app

Testing
✅ Writing simple unit tests (Jest or Mocha basics)

Miscellaneous
✅ Fetching and using third-party APIs
✅ Basic accessibility concepts in JS interactions
✅ Introduction to TypeScript (optional but helpful)

Tooling & Workflow
✅ Debugging (console, breakpoints)
✅ Linting (ESLint)
✅ Bundlers (Webpack, Parcel, Vite)
✅ NPM/Yarn (package management basics)

ES6+ Features
✅ let, const
✅ Arrow functions
✅ Destructuring (arrays & objects)
✅ Template literals
✅ Default parameters
✅ Spread and rest operators (...)
✅ Classes and inheritance (class, extends, super)
✅ Modules (import/export)
✅ Promises
✅ Async/await
✅ Map and Set objects
✅ Symbols

ES6+ Features
✅ let, const
✅ Arrow functions
✅ Destructuring (arrays & objects)
✅ Template literals
✅ Default parameters
✅ Spread and rest operators (...)
✅ Classes and inheritance (class, extends, super)
✅ Modules (import/export)
✅ Promises
✅ Async/await
✅ Map and Set objects
✅ Symbols

DOM & Browser APIs
✅ DOM manipulation (querySelector, getElementById, innerHTML, etc.)
✅ Event handling (addEventListener)
✅ JavaScript object model (Prototype inheritance)
✅ AJAX and Fetch API
✅ Local Storage and Session Storage
✅ Timers (setTimeout, setInterval, clearTimeout, clearInterval)

Starting with JavaScript? Learn this 👇

Core JavaScript
✅ Variables Operators and Data Types
✅ Operators Functions
✅ Control Flow (if/else, switch)
✅ Arrays
✅ Objects
✅ Loops
✅ Scope Hoisting and Closures
✅ The this keyword
✅ Error handling (try/catch/finally)
✅ Type Coercion and Conversion

Wow, that’s wild 😅 Do you think it’s a bug at this point or just Firefox sticking to spec in its own way?

Perfect, I see <marquee> is back. I’ll bring the dancing baby GIFs. Who’s got the MIDI background music?

AI didn’t kill developers. It killed the idea that development was only about writing code, instead of knowing what to build.

“Gallery hype” is chef’s kiss — Cloudflare as the NFT of CDNs.

And what’s the initiation test — resolve a 10k-line merge conflict with vim, or explain null vs undefined while blindfolded?

Insane — hiring’s turned into an endurance race. Do you think all those rounds actually improve hire quality, or just burn out candidates? What's your go-to strategy to survive or shortcut the process?

It’s a tough shift—do you see this as a wake-up call for tech pros to reskill, or a sign that the industry’s priorities are seriously out of balance?

Nice — clean and useful! 🚀 How are you handling concurrent XP updates (atomic DB ops / optimistic locking?), and what DB are you using?

Namespaces in CSS would be a game changer — do you think the community’s ready to adopt a standard approach, or will tooling keep filling that gap for a while?

Haha, sounds like a perfect sidekick for coding — which CSS quirks have been driving you crazy with it?

Turbo’s approach feels more seamless to you? What do you think makes it click better than htmx for your projects?