Thomas G. Lopes

@thomas.rocks

🍨 Building Melt UI & Runed 🧡 Svelte ambassador 🎨 Artist & game dev on my spare time 🐱 Lover of cats

this is your weekly reminder that: ⚪ intelligence != wisdom ⚪ correctness in sphere <a> doesn't port to <b> ⚪ being unchallenged leads to very dark places ⚪ be very careful of trajectory and dhh is racist much love my friends

A thread, because things are feeling rough at present. 🧵👇 I'm not quite sure where to go or what to do. I'm watching my peers slowly burn out, go quiet, quit the industry, or struggle on hoping it'll get better in time. Even if the storm is weathered, what comes out the other side?

🚨 Active supply chain attack on TanStack. 84 npm packages compromised, including react-router (12M+ weekly downloads). The malware is a self-propagating worm: steals GitHub Actions OIDC tokens, republishes itself to npm as the compromised maintainer. Socket flagged every version within 6 minutes.

Bild

So many side projects I want to do... But EOD I'm just so drained that I want to relax. Mostly want to do apps rather than libraries now though. So will be a different beast altogether

Maintenance day for my machines: - Removed Windows, migrated NixOS to the NVME drive - Migrated from gitea to forgejo - Removed duckdns - Wildcard domains in reverse proxy manager Took more time than I'd like, but now I can enjoy the rest of the holiday.