Hacker News: dfreire

New comment by dfreire in "Axios compromised on NPM – Malicious versions drop remote access trojan"

dfreire — Thu, 02 Apr 2026 16:31:20 +0000

Very useful, thanks

New comment by dfreire in "Axios compromised on NPM – Malicious versions drop remote access trojan"

dfreire — Tue, 31 Mar 2026 09:18:33 +0000

Absolutely. If you ever did a npm install on a project using one of the affected axios versions, your entire system may be compromised.

> The malicious versions inject a new dependency, plain-crypto-js@4.2.1, which is never imported anywhere in the axios source code. Its sole purpose is to execute a postinstall script that acts as a cross platform remote access trojan (RAT) dropper, targeting macOS, Windows, and Linux. The dropper contacts a live command and control server and delivers platform specific second stage payloads. After execution, the malware deletes itself and replaces its own package.json with a clean version to evade forensic detection.

I strongly recommend you read the entire article.

New comment by dfreire in "Nothing: Simply Do Nothing"

dfreire — Sat, 21 Sep 2024 09:56:29 +0000

And… you’re doing something.

New comment by dfreire in "How to think in writing"

dfreire — Tue, 09 Jul 2024 07:58:07 +0000

Thank you. This is very different from my own experience and I find it fascinating.

My thoughts are mostly verbal. I do hear an inner voice all the time. I cannot easily catch the moment before words start to form. This excessive wordiness often leads me to a negative experience, it’s relatively easy to fall down on a spiral, worrying to much, going over and over about all the things that can go wrong. I just wish I had the ability to stop. I’m looking into meditation because of this.

New comment by dfreire in "How to think in writing"

dfreire — Mon, 08 Jul 2024 23:01:33 +0000

What a great comment.

Can you expand on why do you strive to be non-verbal?

New comment by dfreire in "Astro DB"

dfreire — Tue, 12 Mar 2024 18:11:45 +0000

So what's the added value over Turso + Drizzle?

New comment by dfreire in "Rook to XSS: How I hacked chess.com with a rookie exploit"

dfreire — Sat, 27 Jan 2024 13:48:47 +0000

I understood it as when it was his turn to play, his piece moved without him moving it

New comment by dfreire in "A blog post is a long and complex search query to find people (2022)"

dfreire — Mon, 06 Nov 2023 22:06:27 +0000

I see what you did here :)

New comment by dfreire in "Ask HN: Is TypeScript worth it?"

dfreire — Fri, 13 Jan 2023 11:59:20 +0000

I don’t want to sound harsh, but saying Javascript is a simpler version of Java just tells me you have never used Java seriously.

It’s like saying Korean is a simpler version of Spanish.

Yes, Java and Javascript are both programming languages, but they don’t even share the same paradigm.

You might be confusing the motivation that led to the creation of Javascript with the actual implementation.

Having said that, I have used Java professionally for more than 7 years, then I switched to mainly Javascript, and later to Typescript, and I’m never going back. I agree with your overall point.