Nostream definitely uses the debug package, unsure if the version installed was affected but the best is CONSIDER your credentials compromised and rotate them. Given the fact that I won’t be able to update Nostream quickly enough and AFAIK there’s no patch available, I recommend switching to another relay. View quoted note →

Big list of npm packages by maintainer qix has been hacked: https://www.npmjs.com/~qix Notably: debug, chalk Malware payload here:

Gist

DO NOT EXECUTE. https://github.com/chalk/chalk/issues/656

DO NOT EXECUTE. https://github.com/chalk/chalk/issues/656 - chalk-source-index-with-malware.js

Don’t add a stupid banner to the topmost part of your website that loads AFTER the rest of the page if it’s going to cause the entire page to shift positions. If you do… you are an idiot!

Claude Code’s 5 hour rate limits are actually kind of healthy. ☀️

“The flame that burns Twice as bright burns half as long.” -Lao Tzu

Attention is a resource

Someone didn’t understand the assignment

Why is everything floating

🎶🎸

Radical Candor is such a great book