frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

iOS 27, iPadOS 27, and macOS 27

https://www.apple.com/newsroom/2026/09/major-updates-for-apples-software-platforms-are-now-availa...
291•throw0101d•5h ago•310 comments

Pion, an agent designed to run any company autonomously

https://andonlabs.com/blog/why-we-built-pion
248•lukaspetersson•6h ago•262 comments

Show HN: Macros with a Behringer FCB1010 MIDI Pedalboard in macOS

https://github.com/JamesRyanATX/fcbnerd
9•fretlessjazz•35m ago•0 comments

Charts built for Chat

https://dbtcharts.com/blog/charts-built-for-chat/
42•thingsilearned•2h ago•16 comments

Amazon vs. Perplexity – U.S. Court of Appeals for the Ninth Circuit

https://law.justia.com/cases/federal/appellate-courts/ca9/26-1444/26-1444-2026-08-04.html
150•neom•2h ago•153 comments

Distributed Systems Classics (2017)

https://nvartolomei.com/dist-sys-classics/
216•grep_it•7h ago•42 comments

Compressing a Flag to 11 Bits

https://read.vantezzen.io/miniflags
34•bennett_dev•2d ago•14 comments

OpenAI bots knew about the RubyGems caching vulnerability

https://tenderlovemaking.com/2026/09/11/what-a-time-to-be-alive/
342•gregnavis•10h ago•298 comments

A Beginning for Mathematics

https://www.daniellitt.com/blog/2026/9/13/a-beginning-for-mathematics/
154•robinhouston•8h ago•87 comments

XCancel service is suspended until further notice

https://xcancel.com/#
401•gaganyaan•13h ago•723 comments

How my e-reader lost its stripes

https://www.serpentine.com/posts/2026/x3-stripes/
133•simonmic•7h ago•20 comments

Principles for Fast Tokio Applications

https://dial9-rs.github.io/blog/principles-for-fast-tokio-applications/
155•carllerche•8h ago•37 comments

Steam Frame starts at $1059

https://store.steampowered.com/hardware/steamframe
446•bsimpson•6h ago•327 comments

Why don't machine learning research agents overfit?

https://www.amazon.science/blog/why-dont-machine-learning-research-agents-overfit
94•Betelbuddy•7h ago•53 comments

Optimizing a Spin-Lock

https://david.alvarezrosa.com/posts/optimizing-a-spin-lock/
31•signa11•2d ago•13 comments

Cloudflare AKE cuts origin HelloRetryRequests from 52% to 3.7%

https://blog.cloudflare.com/automatic-key-exchange-for-origins/
75•iamsyr•6h ago•21 comments

Show HN: Neobrutalism.dev – Just added Base UI support and added new color theme

https://www.neobrutalism.dev/
130•samke-•7h ago•58 comments

GPT-5.6 Luna vs. GPT-6 Astra: Is a $1.20 Model Good Enough for Code Review?

https://entelligence.ai/blogs/gpt-5.6-luna-vs-gpt-6-astra-is-a-1.20-model-good-enough-for-code-re...
85•theanonymousone•3h ago•99 comments

Cua (YC P25) Is Hiring a Founding Technical GTM Lead

https://www.ycombinator.com/companies/cua/jobs/1IWEKVH-founding-technical-gtm-lead
1•frabonacci•6h ago

An atlas of periodic solutions to the three-body problem

https://www.threebodyorbits.com/
329•danielmorozoff•2d ago•75 comments

Ask HN: What are you working on? (September 2026)

289•david927•1d ago•910 comments

Microsoft patches Windows and Excel – breaks audio, remote access, and paste

https://www.theregister.com/os-platforms/2026/09/14/microsoft-patches-windows-and-excel-breaks-au...
182•Alephinitesimal•7h ago•106 comments

Notes on gotchas while migrating 35kb preprompts from Opus to self-hosted Ollama

https://patrickmccanna.net/notes-on-migrating-large-prompts-away-from-anthropic-openai-to-self-ho...
107•0o_MrPatrick_o0•9h ago•58 comments

Show HN: Nari Qwen3-TTS and Qwen3-ASR – High accuracy, low latency and cost

https://narilabs.com/blog/nari-labs-leads-coval-voice-ai-benchmarks/
59•toebee•7h ago•14 comments

Largest known Roman mosaic, beneath Baths of Trajan, opens to the public

https://www.theartnewspaper.com/2026/09/14/largest-roman-mosaic-opens-to-the-public
40•bookofjoe•10h ago•6 comments

Backprop Alternative: Augmented Lagrangian Predictive Coding

https://pub.sakana.ai/pc-alm/
27•guld•5h ago•5 comments

EuroBirdPortal – Live bird movements across Europe

https://www.eurobirdportal.org/ebp/en/
213•NKosmatos•15h ago•63 comments

People Who Can't Picture Anything Are Rewriting the Science of Imagination

https://dailyneuron.com/aphantasia-mental-imagery-brain-network/
71•giuliomagnifico•10h ago•142 comments

Dario, Please

https://pop.rdi.sh/dario-please/
215•0x5FC3•8h ago•102 comments

Adversarial Fashion Makes a Statement on AI Panopticon

https://spectrum.ieee.org/adversarial-fashion
90•rbanffy•9h ago•43 comments