Community
Chat Logs
Saturday, April 11, 2026
- bluehi phaleth
- phalethhi blue
- bluewhat's up
- phalethgonna try to replace mailcow, putting together notes still
- phalethhttps://github.com/axios/axios/issues/10636
- nevetPost Mortem: axios npm supply chain compromise · Issue #10636 · axios/axios
- bluephaleth: tldr; the 'maintainer' was 'invited' by some chinese hackers into discord, where he 'installed' an 'update' for his OS (apparently windows???)
- blueI don't buy the story. The guy is either retarded or too embarrassed to tell the truth
- phalethweb devs generally use windows, even big portion of lib authors
- blue(I didn't read that github story because I already read some report about this a few days ago)
- phalethnodejs has already added native support for fetch API and so no reason to bother with axios, but still, it's weird how widely that lib is used
- blueya
- phalethand how much churn there was
- blueidiots be idiots, I guess? if you use windows, you're a moron
- blueand if you're an npm maintainer using windows, that's even worse
- phalethit's most likely people don't update their old projects, once they added axios years back they still keep using axios to the date, blind to runtime improvements
- phalethhere's some good news https://ziglang.org/devlog/2026/#2026-04-08
- nevetDevlog ⚡ Zig Programming Language
- bluespeaking of zig, work has been ongoing on my js/ts engine
- phalethoh, cool
- blueand I've renamed it from s4 to... *drumroll*
- bluehttps://superarch.org/engine.png
- blueyou gotta appreciate the humour here :P
- phalethyeah, but dog is not searchable
- phalethlike primate, not searchable
- blueyes
- bluevery good
- bluebecause
- blueSEO is not my main interest
- bluenor my master interest
- phalethyou are doing what MS is doing, they take the most common name of something and name their thing that way
- phaleththey stole the code command
- bluelol
- bluehey, I at least stick to biology
- bluecode is MEAN
- bluedog is GREAT
- bluealso, the joke with master is really something that can't be topped
- phalethheh, yeah
- phalethare you using zig master?
- phaleththe last zig release is already well outdated
- phalethno clue why they even bother with zig releases at this point
- blueI think I'm using 0.15.2
- blueso no, not master atm
- phalethok, then might wanna try compiling against zig master
- blueya
- bluesystemfault: TS using # private fields for structural compatibility is a crime against humanity
- bluethey're implementation details, TS should just ignore them, if a public interface matches, that should be enough
