The admin dashboard of LeasingSH.ro -- v4.6.30 -- built before "vibe coding" became a career. No shortcuts to earning that version number. TypeScript · React · Next.js · Node.js · Bun · PostgreSQL · Drizzle

If you have repos on GitHub, please check them. The Shai-Hulud worm is still live in many of them, days after it went public. How to tell if you were hit, how to clean up safely, and what to do if you're locked out. Not your fault: dev.to/icflorescu/i...

If the Shai-Hulud worm reached your GitHub repos, please read this

The Miasma / Shai-Hulud worm is still live in many GitHub repositories. How to tell if you were hit, clean up safely, and what to do if you are locked out.

dev.to

The catch: revoking individual tokens never closes the app authorization they live under. Only revoking the authorization does. And a failed action leaves no trace. I'd been pruning leaves off a branch still attached. dev.to/icflorescu/m...

The Bot that Never Was, Part 2 (Miasma worm): how a GitHub token survived and hijacked my repos from an Azure IP

The resolution, and the forensics. GitHub confirmed the way in: a GitHub CLI token from January that survived a full machine rebuild, used from an Azure IP. Plus the backdated commits I almost missed,...

dev.to

Update on the Miasma worm incident: it's resolved. After 4 days locked out, my GitHub account is back and every repository is clean. The npm packages were never touched. The forensics confirmed it was a previously issued gh CLI token that survived a purge, quietly stolen and reused months later.

My GitHub account (github.com/icflorescu) was compromised in a supply chain attack via the github-actions bot. 5 repos affected. Published npm packages are safe. Account suspended. Support ticket submitted. If anyone has a GitHub/Microsoft contact who can help escalate, please reach out.

icflorescu - Overview

Author of Mantine DataTable, Mantine ContextMenu, PocketBaseUML, tRPC-SvelteKit & other OSS. React/Next.js & Node.js geek. Building web apps with style. - icflorescu

github.com

How I vibe-coded a nuclear power plant CRDS (Control Rod Drive System) in a lazy Sunday afternoon It started with a matcha latte and a realization: legacy energy is bogged down by "experts." Read the full story: www.linkedin.com/posts/icflor... #vibecoding #ai #startup #energy #efficiency

vike@0.4.232 ✨ Many HMR fixes for + files 💫 +redirects support for SSG Roadmap: - Finish internal refactoring and polishing - Open Source Pricing (we're hesitating about two different designs, we'll ask for feedback soon)

Mantine DataTable v8 released! 🎉

I see lots of ppl using Zustand, which is cool. Fewer people are using valtio.dev, which is even cooler imo. I wonder why. #react #state #zustand #valtio

I take everything AI-related with a grain of salt nowadays, as I'm really tired of seeing so many non-technical people think they can really build things without understanding or caring how stuff works. However, I just found this to be very interesting: www.epicai.pro/the-cost-eff... #ai #mcp

The cost-effective promise of Model Context Protocol (MCP)

Discover how the Model Context Protocol (MCP) enables cost-effective, scalable AI integration by leveraging users’ existing AI subscriptions.

epicai.pro

next/fonts are broken in Next.js 15.3 with Turbopack enabled. I'm soooo tired of this sh*t... github.com/vercel/next.... #nextjs #turbopack #react #typescript #vercel

Recently discovered waku.gg while looking for a sane and lightweight alternative to Next.js. And please believe me, it's not easy for me to say that an alternative is needed; I've been an OSS developer for more than a decade and a die-hard Next.js fan and heavy-user since its inception.

Waku, the minimal React framework

A lightweight alternative React framework with a fun developer experience. Loved by React developers at startups and agencies.

waku.gg