frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Building my npx business card

https://ashley.dev/posts/turning-feedback-into-features/
8•edent•1y ago

Comments

steele•1y ago
Ooh, free real estate, let's colonize and gentrify package management
aabhay•1y ago
Lmao, gentrify cracked me up
neilv•1y ago
Do these npx business cards run arbitrary code on your computer?
cypherpunks01•1y ago
npx

Run a command from a local or remote npm package

Description

This command allows you to run an arbitrary command from an npm package (either one installed locally, or fetched remotely), in a similar context as running it via npm run.

neilv•1y ago
Yes, then is a "command from an npm package" arbitrary code?

And what is this "similar context as running it via npm run"?

Would it be better to answer the question directly?

joshka•1y ago
Yeah, this seems like a very smart but inherently flawed idea.
cypherpunks01•1y ago
Yes I agree! OSS package management ecosystems are a great idea, but allowing submissions without any review or vetting is just asking for supply chain attacks.
Xss3•1y ago
May as well just release an executable tbh.
theamk•1y ago
Reminds me of JAPH [0] - a tiny Perl program that was used in email/newsgroup signature to give it personal touch.

[0] https://www.perlmonks.org/?node_id=412464

watusername•1y ago
Terminal business cards are a nice idea, but RCE business cards are just asking for trouble. Instead of npx, what happened to good'ol curl? Something like

$ curl ashley.dev

Some decades ago, we had finger (https://en.wikipedia.org/wiki/Finger_%28protocol%29) which is designed for this very use case. Sadly it's no longer installed by default with most distros:

$ finger @ashley.dev

queezey•1y ago
This would be a great advertisement for security consulting.

"I was just able to run arbitrary code on your computer. Here is a sample of your recent browser history. Let me tell you help you mitigate your security vulnerabilities."

Zero-Touch OAuth for MCP

https://blog.modelcontextprotocol.io/posts/enterprise-managed-auth/
85•niyikiza•3h ago•30 comments

How Japan's railways stayed one while splitting apart

https://arun.is/blog/jr-logo/
18•ddrmaxgt37•1d ago•2 comments

I found 10k GitHub repositories distributing Trojan malware

https://orchidfiles.com/github-repositories-distributing-malware/
661•theorchid•13h ago•149 comments

Cell-based architecture for resilient payment systems

https://americanexpress.io/cell-based-architecture-for-resilient-payment-systems/
82•birdculture•3d ago•30 comments

Ubiquiti: Enterprise NAS, Built on ZFS

https://blog.ui.com/article/introducing-enterprise-nas
251•ksec•11h ago•235 comments

Datasette Apps: Host custom HTML applications inside Datasette

https://simonwillison.net/2026/Jun/18/datasette-apps/
11•lumpa•31m ago•2 comments

Flexport (YC W14) Is Hiring in Indonesia, India, and Thailand

https://www.flexport.com/company/careers/
1•thedogeye•36m ago

Zork name origin got an update on Wikipedia

https://www.dpolakovic.space/blogs/zork-part2#update
47•dpola•5h ago•7 comments

CS 6120: Advanced Compilers: The Self-Guided Online Course (2020)

https://www.cs.cornell.edu/courses/cs6120/2025fa/self-guided/
299•ibobev•14h ago•44 comments

I told them forced consent was unlawful. 5 years later it cost Elkjop €1.8M

https://www.thatprivacyguy.com/blog/elkjop-forced-consent-fine/
228•speckx•7h ago•90 comments

Swiss parliament lifts ban on new nuclear power plants

https://www.bluewin.ch/en/news/switzerland/parliament-lifts-ban-on-new-nuclear-power-plants-32575...
686•leonidasrup•11h ago•558 comments

Hospitals and universities repurposing drugs at lower cost

https://www.kcl.ac.uk/news/hospitals-and-universities-repurposing-drugs-at-90-lower-cost
281•giuliomagnifico•15h ago•119 comments

Update on Ocean Observatories Initiative

https://www.nsf.gov/news/update-ocean-observatories-initiative
90•andsoitis•1h ago•16 comments

The Token Compression Illusion: Why I'm Skeptical of RTK

https://mroczek.dev/articles/the-token-compression-illusion-why-im-skeptical-of-rtk/
76•lackoftactics•8h ago•87 comments

Launch HN: TesterArmy (YC P26) – Agents that test web and mobile apps

https://tester.army
97•okwasniewski•10h ago•45 comments

Show HN: Are You in the Weights?

https://www.intheweights.com/
176•turtlesoup•4h ago•117 comments

Noam Shazeer Joins OpenAI

https://twitter.com/NoamShazeer/status/2067400851438932297
279•lukasgross•1d ago•270 comments

.gitignore Isn't the only way to ignore files in Git

https://nelson.cloud/.gitignore-isnt-the-only-way-to-ignore-files-in-git/
279•FergusArgyll•15h ago•96 comments

W Social, public institutions and the theater of European digital sovereignty

https://blog.elenarossini.com/w-social-public-institutions-and-the-theater-of-european-digital-so...
177•nemoniac•12h ago•118 comments

NOLA 'Nacular: One man's crusade to preserve New Orleans's vernacular signage

https://countryroadsmagazine.com/art-and-culture/people-places/nola-nacular/
4•NaOH•1d ago•0 comments

The Korean telecom giant at the center of Anthropic's Mythos controversy

https://www.wired.com/story/sk-telecom-anthropic-mythos-export-controls/
100•dstala•12h ago•78 comments

If your product is Great, it doesn't need to be Good (2010)

http://paulbuchheit.blogspot.com/2010/02/if-your-product-is-great-it-doesnt-need.html
24•skogstokig•3d ago•20 comments

Modos Color Monitor Pushes E-Paper Displays Further

https://spectrum.ieee.org/modos-e-paper-monitor
226•Vinnl•13h ago•65 comments

Agentic Resource Discovery Specification

https://agenticresourcediscovery.org/introduction/
48•damick•1d ago•14 comments

Migrating from GNU Stow to Chezmoi

https://rednafi.com/misc/chezmoi/
99•speckx•8h ago•101 comments

Show HN: Gerrymandle - Daily puzzle game where you redraw electoral districts

https://gerrymandle.cc/
133•realmofthemad•11h ago•63 comments

Automating my job away

https://austinhenley.com/blog/automatingmyjob.html
6•azhenley•4d ago•0 comments

How Alberta Eradicated Rats

https://worksinprogress.co/issue/albertas-war-on-rats/
131•tzury•12h ago•98 comments

The founder of Craigslist has given away half a billion dollars

https://www.independent.co.uk/us/money/craigslist-multimillionaire-craig-newmark-b2980681.html
320•Tomte•8h ago•246 comments

Emacs 31 is around the corner: The changes I'm daily driving

https://www.rahuljuliato.com/posts/emacs-31-around-the-corner
411•frou_dh•13h ago•231 comments