frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

OpenJev

https://openjev.com/
178•ilreb•2h ago•97 comments

ZCode, the GLM coding agent, silently uploads your Git history

https://tokenstead.ai/guides/zcode-silent-git-history-upload
83•cdnsteve•1h ago•16 comments

Jemalloc 5.4.0

https://github.com/jemalloc/jemalloc/releases/tag/5.4.0
194•gkfasdfasdf•7h ago•54 comments

Microsoft exec called AI scraping 'the largest theft of labor in human history'

https://techcrunch.com/2026/09/17/microsoft-exec-called-ai-scraping-the-largest-theft-of-labor-in...
251•pluc•2h ago•181 comments

The scourge of x86 emulation

https://fex-emu.com/Scourge-of-emulation/
177•dagmx•7h ago•35 comments

Cekura (YC F24) Is Hiring

https://www.ycombinator.com/companies/cekura-ai/jobs/AiWwUxI-forward-deployed-engineer-us
1•atarus•7m ago

Astra for Law

https://openai.com/index/astra-for-law/
513•vertigoruntime•15h ago•599 comments

Bonsai 2 27B: Near-Lossless Compression in a 9x Smaller Footprint

https://prismml.com/news/bonsai-2-27b
475•JonSchneider•14h ago•142 comments

Replacing Pull Requests with Delta

https://zed.dev/blog/delta-public-beta
49•vquemener•1d ago•16 comments

Subnormal floating-point numbers are expensive on Intel processors

https://lemire.me/blog/2026/09/15/subnormal-floating-point-numbers-are-expensive-on-intel-process...
11•zdw•2d ago•1 comments

Bend – A language that blocks AI mistakes via proof, on CPU and GPU

https://bend-lang.com/
502•nicolas-siplis•15h ago•238 comments

Qwen 3.8 Omni Flash

https://qwen.ai/blog?id=qwen3.8-omni-flash
255•jjcm•13h ago•88 comments

Hister: A private search engine for the pages you visit and the files you keep

https://github.com/asciimoo/hister
639•bookofjoe•19h ago•171 comments

Wax motor

https://en.wikipedia.org/wiki/Wax_motor
440•mhb•1d ago•75 comments

Warren Buffett Steps Down as Berkshire Chairman, Names Son to Replace Him

https://www.nytimes.com/2026/09/18/business/warren-buffett-berkshire-chairman.html
32•saimiam•1h ago•14 comments

When the fractional part of a float fixes your shader

https://crocidb.com/post/when-the-fractional-part-of-a-float-fixes-your-shader/
52•vinhnx•1d ago•8 comments

Fujitsu launches made-in-Japan next-generation CPU FUJITSU-MONAKA

https://global.fujitsu/en-global/pr/news/2026/09/14-02
608•my123•2d ago•236 comments

Pre-Greek: The lost language hidden within Ancient Greek

https://linguisticdiscovery.com/posts/pre-greek/
97•axiologist•9h ago•43 comments

Dr Julius Neubronner's Miniature Pigeon Camera

https://publicdomainreview.org/collection/dr-julius-neubronner-s-miniature-pigeon-camera/
15•vitonsky•2d ago•0 comments

How to Write with an LLM

https://sockpuppet.org/blog/2026/09/17/how-to-write-with-an-llm/
201•joeriddles•14h ago•127 comments

A heap overflow and SSO misconfiguration to compromise OpenAI internal repos

https://www.hacktron.ai/blog/hacking-openai
372•Handy-Man•9h ago•159 comments

Google illegally retains customer data,and I am taking legal action against them

https://medium.com/@istokovicsgyorgy79/google-illegally-retains-customer-data-and-i-am-taking-leg...
40•Bitu79•1h ago•6 comments

Shapelearn Qwen 3.8 27B (13.1 GB VRAM)

https://byteshape.com/blogs/Qwen3.8-27B/
77•syntaxing•10h ago•17 comments

Ask A Monk – A digital wilderness for thoughts with no immediate answer

https://askamonk.online
49•13613288957•10h ago•27 comments

Flet 1.0 – Build cross-platform apps in Python

https://flet.dev/
135•absqueued•15h ago•67 comments

Telstra outage: The night a network decided the year was 2006

https://www.netnod.se/blog/telstra-outage-night-network-decided-year-was-2006
68•TMWNN•11h ago•29 comments

Diplodocus, Long Thought Exclusively American, Turns Up in Spain

https://www.sci.news/paleontology/spanish-diplodocus-15064.html
76•embedding-shape•3d ago•45 comments

Speeding up gearhash on ARM64

https://sam.dev/blog/gearhash-on-arm64
24•pranitha_m•2d ago•0 comments

The most important product decision is what you don't build

https://liamnugent.me/posts/what-you-dont-build/
121•ChrisArchitect•15h ago•41 comments

Why I didn’t sign the Fields medallists’ letter

https://gowers.wordpress.com/2026/09/17/why-i-didnt-sign-the-fields-medallists-letter/
265•simianwords•1d ago•374 comments