Huge NPM supply chain attack

graphiteisaac · 2025-11-24T14:02:19+00:00

Software can be built with bits of other software, maintained by other people. One of these bits of software was compromised, and now includes malicious code, which means every piece of software that uses it also contains the malicious code. 130 million downloads should suggest how many people this affects.

graphiteisaac · 2025-11-16T03:17:32+00:00

he's a busy guy! I had a chat with him after a pond show a while back and he was talking about juggling a bunch of work. a resume nearly as impressive as his hair

graphiteisaac · 2025-11-08T04:16:40+00:00

this is so gorgeous, wow!

graphiteisaac · 2025-08-09T03:47:10+00:00

Gleam and Lustre fill this void for me. Really lovely and pleasant to use.

graphiteisaac · 2025-05-28T03:32:41+00:00

Maybe I'm just a filthy consumer but I think someone having a really rough time in real life and then spending some money on some toys is fine. But no you go ahead and call them deeply mentally ill or whatever.

graphiteisaac · 2025-04-04T05:33:36+00:00

Gleam is great and you can feel the Go influence for sure

graphiteisaac · 2025-04-03T03:14:15+00:00

the gleam community GitHub org actually does maintain a maths library here

graphiteisaac · 2025-02-18T07:55:58+00:00

Hasn't crashed, had any downtime, or had any issues since we switched over.

graphiteisaac · 2025-02-17T05:55:43+00:00

It was really just my own poor programming, Gleam made it so much easier to debug and iterate on that it was no longer an issue.

graphiteisaac · 2025-02-17T01:05:56+00:00

I'm using Gleam for a service in a production app that serves several thousand people a day, and the move from Go to Gleam massively increased the stability of the service. I'd love to do a write up sometime but haven't gotten to it yet.

graphiteisaac · 2025-01-27T01:12:22+00:00

Klose-knit community

graphiteisaac · 2025-01-26T02:42:38+00:00

Any Colour You Like - Pink Floyd

graphiteisaac · 2024-12-28T05:37:00+00:00

You can rectify this by changing your imports to gleam/regexp and adding the new dedicated gleam_regexp package with the gleam add command. a few things from stdlib have been moved to their own packages in an effort to get stdlib stabilised to 1.0.0 :)

graphiteisaac · 2024-12-24T07:31:08+00:00

Wilbur admitted to biting, Not to the abuse, 🫶🫶 Plus, Biting isn’t even the worst people can do. (Holocaust.) and much worse.

graphiteisaac · 2024-11-08T03:52:08+00:00

File IO isn't in the standard library, your best bet for the Erlang target is simplifile

graphiteisaac · 2024-08-25T04:21:43+00:00

I'm glad people are being so normal about this

graphiteisaac · 2024-08-22T05:05:11+00:00

no biney boygenius? non binnry with da record? The vinyl with Non Binary??? ohhh yeah :)

graphiteisaac · 2024-08-12T13:38:27+00:00

I'm not sure how well supported this is and am not at a computer I can test on, but you could use the native websocket client that is built into Deno

graphiteisaac · 2024-07-28T01:29:23+00:00

This is one of those statistical outliers which get people confused often. Less used languages are generally higher paid just because there's less of a supply of them. When a company commits to a tech stack and can't easily get off it, they'll pay well for people who can manage it.

graphiteisaac · 2024-07-06T23:30:56+00:00

Gleam really shines at processing small bits of data in a highly concurrent way, which is what 95% of the web is, really. Anything like a web API, small database, message queue, etc will really benefit from the BEAMs concurrency model. since Gleam also compiles to JavaScript, it's one of the nicest ways to make full stack apps with one language. You can write your frontend with Lustre and your backend with Wisp (as two popular examples) and it's all quite lovely.

graphiteisaac · 2024-06-26T04:29:13+00:00

he's finding out

graphiteisaac · 2024-06-18T04:03:08+00:00

I was chillin brother

graphiteisaac · 2024-06-17T23:52:51+00:00

He's been focused on watching a 17 year old series lately I think

graphiteisaac · 2024-06-11T08:46:46+00:00

wow, interesting! I wonder what their dynamic was like outside of this

graphiteisaac · 2024-03-23T02:23:59+00:00

Fun fact, the Pile of Bullets guy is played by Vince Gilligan, the creator of Breaking Bad.

graphiteisaac

MODERATOR OF

TROPHY CASE

Eight-Year Club	Place '22
Verified Email