frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•9mo ago

Comments

steele•9mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•9mo ago
Lmao, gentrify cracked me up
neilv•9mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•9mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•9mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•9mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•9mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•9mo ago
May as well just release an executable tbh.
theamk•9mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•9mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•9mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

MessageFormat: Unicode standard for localizable message strings

https://github.com/unicode-org/message-format-wg
67•todsacerdoti•2h ago•32 comments

I want to wash my car. The car wash is 50 meters away. Should I walk or drive?

https://mastodon.world/@knowmadd/116072773118828295
735•novemp•6h ago•478 comments

I’m joining OpenAI

https://steipete.me/posts/2026/openclaw
1158•mfiguiere•15h ago•857 comments

Qwen3.5: Towards Native Multimodal Agents

https://qwen.ai/blog?id=qwen3.5
64•danielhanchen•3h ago•25 comments

Thanks a lot, AI: Hard drives are sold out for the year, says WD

https://mashable.com/article/ai-hard-drive-hdd-shortages-western-digital-sold-out
50•dClauzel•48m ago•19 comments

picol: A Tcl interpreter in 500 lines of code

https://github.com/antirez/picol
55•tosh•5h ago•38 comments

Anthropic tries to hide Claude's AI actions. Devs hate it

https://www.theregister.com/2026/02/16/anthropic_claude_ai_edits/
61•beardyw•2h ago•19 comments

Rolling your own serverless OCR in 40 lines of code

https://christopherkrapu.com/blog/2026/ocr-textbooks-modal-deepseek/
15•mpcsb•3d ago•4 comments

Magnus Carlsen Wins the Freestyle (Chess960) World Championship

https://www.fide.com/magnus-carlsen-wins-2026-fide-freestyle-world-championship/
312•prophylaxis•14h ago•206 comments

Vim-pencil: Rethinking Vim as a tool for writing

https://github.com/preservim/vim-pencil
40•gurjeet•3d ago•6 comments

Modern CSS Code Snippets: Stop writing CSS like it's 2015

https://modern-css.com
524•eustoria•19h ago•209 comments

Expensively Quadratic: The LLM Agent Cost Curve

https://blog.exe.dev/expensively-quadratic
58•luu•3d ago•33 comments

Arm wants a bigger slice of the chip business

https://www.economist.com/business/2026/02/12/arm-wants-a-bigger-slice-of-the-chip-business
102•andsoitis•10h ago•63 comments

1,300-year-old world chronicle unearthed in Sinai

https://www.heritagedaily.com/2026/02/1300-year-old-world-chronicle-unearthed-in-sinai/156948
65•telotortium•4d ago•9 comments

LT6502: A 6502-based homebrew laptop

https://github.com/TechPaula/LT6502
371•classichasclass•20h ago•178 comments

Audio is the one area small labs are winning

https://www.amplifypartners.com/blog-posts/arming-the-rebels-with-gpus-gradium-kyutai-and-audio-ai
228•rocauc•3d ago•61 comments

Building SQLite with a small swarm

https://kiankyars.github.io/machine_learning/2026/02/12/sqlite.html
79•kyars•7h ago•64 comments

I gave Claude access to my pen plotter

https://harmonique.one/posts/i-gave-claude-access-to-my-pen-plotter
222•futurecat•2d ago•140 comments

JavaScript-heavy approaches are not compatible with long-term performance goals

https://sgom.es/posts/2026-02-13-js-heavy-approaches-are-not-compatible-with-long-term-performanc...
110•luu•12h ago•123 comments

Show HN: Microgpt is a GPT you can visualize in the browser

https://microgpt.boratto.ca
217•b44•18h ago•23 comments

The Israeli spyware firm that accidentally just exposed itself

https://ahmedeldin.substack.com/p/the-israeli-spyware-firm-that-accidentally
12•0x54MUR41•1h ago•0 comments

EU bans the destruction of unsold apparel, clothing, accessories and footwear

https://environment.ec.europa.eu/news/new-eu-rules-stop-destruction-unsold-clothes-and-shoes-2026...
1067•giuliomagnifico•20h ago•716 comments

Designing a 36-key custom keyboard layout (2021)

https://peterxjang.medium.com/designing-a-36-key-custom-keyboard-layout-24498a0eecd4
24•speckx•2d ago•11 comments

Hard problems in social media archiving

https://alexwlchan.net/2025/hard-problems-in-social-media-archiving/
11•surprisetalk•3d ago•2 comments

Lost Soviet Moon Lander May Have Been Found

https://www.nytimes.com/2026/02/10/science/luna-9-moon-lander-soviet.html
69•Brajeshwar•4d ago•47 comments

Gwtar: A static efficient single-file HTML format

https://gwern.net/gwtar
250•theblazehen•21h ago•78 comments

Real-time PathTracing with global illumination in WebGL

https://erichlof.github.io/THREE.js-PathTracing-Renderer/
174•tobr•3d ago•15 comments

Show HN: Knock-Knock.net – Visualizing the bots knocking on my server's door

https://knock-knock.net
177•djkurlander•20h ago•73 comments

Pocketblue – Fedora Atomic for mobile devices

https://github.com/pocketblue/pocketblue
116•nikodunk•20h ago•35 comments

Error payloads in Zig

https://srcreigh.ca/posts/error-payloads-in-zig/
79•srcreigh•14h ago•29 comments