frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•10mo ago

Comments

steele•9mo ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•9mo ago
Lmao, gentrify cracked me up
neilv•9mo ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•9mo ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•9mo ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•9mo ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•9mo ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•9mo ago
May as well just release an executable tbh.
theamk•9mo ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•9mo ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•9mo ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Show HN: Han – A Korean programming language written in Rust

https://github.com/xodn348/han
78•xodn348•2h ago•33 comments

Changes to OpenTTD Distribution on Steam

https://www.openttd.org/news/2026/03/14/steam-changes
93•canpan•2h ago•53 comments

The Sound of Contamination: Headphones Contain Ing Hormone-Disrupting Chemicals

https://arnika.org/en/news/the-sound-of-contamination-all-analysed-headphones-on-the-central-euro...
34•microflash•1h ago•10 comments

Ageless Linux. We are legally required to ask how old you are. We won't

https://agelesslinux.org/
142•nateb2022•2h ago•99 comments

Claude March 2026 usage promotion

https://support.claude.com/en/articles/14063676-claude-march-2026-usage-promotion
173•weldu•4h ago•106 comments

Anthropic invests $100M into the Claude Partner Network

https://www.anthropic.com/news/claude-partner-network
58•gmays•2h ago•18 comments

Fedora 44 on the Raspberry Pi 5

https://nullr0ute.com/2026/03/fedora-44-on-the-raspberry-pi-5/
51•jandeboevrie•4h ago•16 comments

Bumblebee queens breathe underwater to survive drowning

https://www.smithsonianmag.com/science-nature/bumblebee-queens-breathe-underwater-to-survive-drow...
27•1659447091•3h ago•3 comments

Library of Short Stories

https://www.libraryofshortstories.com/
32•debo_•4h ago•1 comments

Marketing for Founders

https://github.com/EdoStra/Marketing-for-Founders
92•jimsojim•4h ago•28 comments

Airbus is preparing two uncrewed combat aircraft

https://www.airbus.com/en/newsroom/press-releases/2026-03-airbus-is-preparing-two-uncrewed-combat...
8•phasnox•1h ago•1 comments

Show HN: Ichinichi – One note per day, E2E encrypted, local-first

59•katspaugh•5h ago•25 comments

Learning Creative Coding

https://stigmollerhansen.dk/resume/learning-creative-coding/
27•ammerfest•2h ago•6 comments

A Recursive Algorithm to Render Signed Distance Fields

https://pointersgonewild.com/2026-03-06-a-recursive-algorithm-to-render-signed-distance-fields/
40•surprisetalk•3d ago•3 comments

Offloading FFmpeg with Cloudflare

https://kentcdodds.com/blog/offloading-ffmpeg-with-cloudflare
21•heftykoo•4d ago•14 comments

SBCL Fibers – Lightweight Cooperative Threads

https://atgreen.github.io/repl-yell/posts/sbcl-fibers/
3•anonzzzies•54m ago•0 comments

Montana passes Right to Compute act (2025)

https://www.westernmt.news/2025/04/21/montana-leads-the-nation-with-groundbreaking-right-to-compu...
234•bilsbie•10h ago•202 comments

Baochip-1x: What it is, why I'm doing it now and how it came about

https://www.crowdsupply.com/baochip/dabao/updates/what-it-is-why-im-doing-it-now-and-how-it-came-...
262•timhh•3d ago•49 comments

An ode to bzip

https://purplesyringa.moe/blog/an-ode-to-bzip/
86•signa11•8h ago•53 comments

Making your JITted Code known: Let me count the ways

https://wakelift.de/2026/03/09/making-your-jitted-code-known-let-me-count-the-ways/
3•lizmat•4d ago•0 comments

Python: The Optimization Ladder

https://cemrehancavdar.com/2026/03/10/optimization-ladder/
258•Twirrim•4d ago•93 comments

9 Mothers Defense (YC P26) Is Hiring in Austin

https://jobs.ashbyhq.com/9-mothers?utm_source=x8pZ4B3P3Q
1•ukd1•10h ago

Postgres with Builtin File Systems

https://db9.ai/
19•ngaut•3h ago•0 comments

Show HN: GitAgent – An open standard that turns any Git repo into an AI agent

https://www.gitagent.sh/
88•sivasurend•10h ago•12 comments

Starlink militarization and its impact on global strategic stability

https://interpret.csis.org/translations/starlink-militarization-and-its-impact-on-global-strategi...
118•msuniverse2026•15h ago•155 comments

Sunsetting Jazzband

https://jazzband.co/news/2026/03/14/sunsetting-jazzband
132•mooreds•6h ago•44 comments

Hostile Volume – A game about adjusting volume with intentionally bad UI

https://hostilevolume.com/
70•Velocifyer•5h ago•52 comments

An interactive presentation about the Grammar of Graphic

https://timeplus-io.github.io/gg-vistral-introduction/
10•gangtao•3d ago•0 comments

XML is a cheap DSL

https://unplannedobsolescence.com/blog/xml-cheap-dsl/
231•y1n0•12h ago•239 comments

Megadev: A Development Kit for the Sega Mega Drive and Mega CD Hardware

https://github.com/drojaazu/megadev
116•XzetaU8•15h ago•7 comments