Lightnews — Scholar-powered news

JounQin @1stg.me · Jul 21

Yes, you're correct here.

I contact @synologyofficial.bsky.social support, DMARC only works when the email server itself has related DNS record, and @npmjs.bsky.social only uses .com as it's email server, so .org doesn't have related DNS record, which results DMARC not working as expected. 🤦‍♂️

1

JounQin @1stg.me · Jul 19

www.virustotal.com/gui/file/c68...

www.virustotal.com

1

JounQin @1stg.me · Jul 18

> Authentication: SPF, DKIM, and DMARC all failed.

I'll contact my email service provider @synologyofficial.bsky.social to check why DMARC didn't work for me in this case, and that's why I relaxed my vigilance. 🤦‍♂️

1

JounQin @1stg.me · Jul 18

That's me been tricked sadly 😭 : bsky.app/profile/1stg...

JounQin @1stg.me · Jul 18

cc @eslint.org @prettier-eslint.bsky.social

Attention!!

I was tricked by a phishing email and a npm token was added and leaked then some popular packages I'm maintaining were released with malicious software, I've deleted the leaked token and deprecated all bad versions and released new versions.

4

JounQin @1stg.me · Jul 18

cc @github.com @npmjs.bsky.social

I only checked the email address and trusted my @synologyofficial.bsky.social Email service with SPF and DMARC enabled, so I let my guard down. 😭

I still don't understand how is that possible to bypass the DMARC check.

1 3

JounQin @1stg.me · Jul 18

My bad. 😭

1

JounQin @1stg.me · Jul 18

All affected packages and versions are:

- eslint-config-prettier
- 8.10.1
- 9.1.1
- 10.1.6
- 10.1.7
- eslint-plugin-prettier:
- 4.2.2
- 4.2.3
- snyckit:
- 0.11.9
- @pkgr/core:
- 0.2.8
- napi-postinstall:
- 0.3.1

Thanks all, and sorry for my negligence.

4 9

JounQin @1stg.me · Jul 18

cc @eslint.org @prettier-eslint.bsky.social

Attention!!

I was tricked by a phishing email and a npm token was added and leaked then some popular packages I'm maintaining were released with malicious software, I've deleted the leaked token and deprecated all bad versions and released new versions.

6 13 28

JounQin @1stg.me · Jul 11

Hi, any news here? ❤️

JounQin @1stg.me · Jul 4

Does anyone know how to contact @jddalton.bsky.social privately? I tried to DM but got no response, maybe he treated my message as spam unfortunately. 😂

1

JounQin @1stg.me · Jul 4

So why it's not enabled by default by Node.js itself?

1

JounQin @1stg.me · Jul 3

Please choose your hero? 😂

It seems `rspack-resolver` and `oxc-resolver` can not be merged into one in the near future, so I have to be the glue between them which means I'll help to synchronizing changes as much as possible.

cc @chenjiahan.bsky.social @boshen.github.io @rspack.dev

JounQin @1stg.me · Jun 26

So, thanks to @boshen.github.io, `unrs-resolver` is going to merge back into `oxc-resolver`! 🤯

github.com/unrs/unrs-re...

Merge back to oxc-resolver? · Issue #167 · unrs/unrs-resolver

Reasons: We are landing oxc-resolver into vite. Syncing the two resolvers is tedious for everyone, including people who need to make modifications (e.g. arcanis). I'm going to enable yarn pnp in ox...

github.com

2

JounQin @1stg.me · Jun 26

What's the use case of using `pnpapi` without `process.versions.pnp` by the way? And how would it be auto installed by other PM?

1

JounQin @1stg.me · Jun 25

How would that work comparing with checking `process.versions.pnp`?

1

JounQin @1stg.me · Jun 25

Thanks everyone for making this release happen! 🥳

github.com/un-ts/eslint...

github.com

JounQin @1stg.me · Jun 24

#浦发银行 #信用卡 #信用卡提额

不是哥们儿，跟我玩儿抽象是吧？🌚

JounQin @1stg.me · Jun 23

github.com/un-ts/unuse is now public, and unuse.js.org is also alive. 🚀

GitHub - un-ts/unuse: learn once, use everywhere

learn once, use everywhere. Contribute to un-ts/unuse development by creating an account on GitHub.

github.com

JounQin @1stg.me · Jun 19

组一套不那么妥协且不那么丑的 7.1.4 真不容易。🌚

家庭影院真不是能随便玩儿的，预算一超再超，下辈子不玩儿了。😅

JounQin @1stg.me · Jun 10

@jestjs.io 30 has just been shipped, the module resolving performance is much better by using `unrs-resolver` under the hood! 🥳

jestjs.io/blog/2025/06...

Jest 30: Faster, Leaner, Better · Jest

Today we are happy to announce the release of Jest 30. This release features a substantial number of changes, fixes, and improvements. While it is one of the largest major releases of Jest ever, we ad...

jestjs.io

2

JounQin @1stg.me · Jun 6

新玩具到了。🤩

就是新系统还有点儿蠢，传输下载的数据有那么多机身内存不放，偏要存到 SD 卡，还给我整死机一回，SD 卡直接被强制要求格式化了。😭

此刻还在一个个把游戏下回来，就这个网络环境不知道得下到啥时候才能下完。🤦‍♂️

大家注意迁移前不要插入 SD 卡，或者迁移完赶紧把游戏移到机身内存，血的教训。🤪

1

JounQin @1stg.me · Jun 4

Thanks @christoph.nkzw.tech ‬⁩, #unrs_resolver migration is now merged into #jest! 🥳

I'll do some even more improvements/optimizations soon later! 🤩

chore: migrate `resolve` and `resolve.exports` to `unrs-resolver` by JounQin · Pull Request #15619 · jestjs/jest

Summary close #15600 Test plan There are already related test cases.

github.com

JounQin @1stg.me · Jun 3

It seems @microsoft.com #Windows‬⁩ compatibility is not considered at all in `pnp-rs`... 🤦‍♂️

test: add a new test case for global cache by JounQin · Pull Request #10 · yarnpkg/pnp-rs

github.com

JounQin @1stg.me · Jun 2

Thanks @sindresorhus.com‬⁩, `xo` now uses `eslint-plugin-import-x`! 🤩 This is HUGE for us!

cc @eslint.org‬⁩

Release v1.0.0 · xojs/xo

Breaking Requires ESLint flat config Requires Node.js 20.17 Configuration now only through package.json and xo.config.{js,cjs,mjs,ts,cts,mts} files Switched from eslint-plugin-import to eslint-plu...

github.com

1

JounQin @1stg.me · May 31

#Switch2 #Nintendo #NintendoSwitch #Switch2首发

XDM，替你们试过了，京东更便宜。🥹

4895.38 vs 4857.73