HackerTrans
TopNewTrendsCommentsPastAskShowJobs

InGoodFaith

no profile record

comments

InGoodFaith
·11 месяцев назад·discuss
didn't the underlying API they built upon ramp up their pricing and effectively price them out?

like a precursor to reddit's own API pricing changes that made it hard for 3rd party clients to compete.

The saving grace with these API wrappers is that local models being a thing can still let them hedge against the underlying AI labs eating up their stack.
InGoodFaith
·12 месяцев назад·discuss
It appears the individual was unable to distinguish a display name from the actual email address (common phishing tactic of having something like [email protected] as the email display name while the actual email address is a random throwaway). [1]

Good reminder to use a password manager as well (as it would also catch the 'npnjs' typo squatted domain too).

Similar incident happened to the HIBP guy who mentioned ignoring the password manager safeguards due to being half asleep while on the plane.

Also keep in mind you can disable install scripts in npm from running (if you happen to not do your development in an isolated environment) via configuring your .npmrc with

> ignore-scripts=true

Stay safe out there

1: https://x.com/JounQin/status/1946297662069993690