NPM debug and chalk packages compromised

Re:NPM debug and chalk packages compromised by EasyMark on Monday September 08, 2025 @01:42PM (#45171334)

AI says this

The command rg -u --max-columns=80 _0x112fa8 uses the rg (ripgrep) utility. Here's a breakdown of what each part does:

    rg: This is the command for ripgrep, a fast, recursive search tool that respects .gitignore and searches files for a given pattern.
    1
    -u: This flag tells ripgrep to search files that have been ignored by default (e.g., those listed in .gitignore).
    1
    --max-columns=80: This option sets the maximum width of a line to 80 characters. If a line exceeds this width, ripgrep will replace it with a message indicating that a matching line was removed, rather than displaying the full, long line.
    1
    _0x112fa8: This is the pattern that rg will search for within the files. It appears to be a hexadecimal string.

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by naikrovek on Monday September 08, 2025 @03:20PM (#45172662)

I feel like you were trying to help here, but anyone can do this for themselves. Providing information in this way sort of indicates that you don't believe that the person you're replying to can do it on their own, and for that reason it's considered rude.

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by skygazer on Monday September 08, 2025 @05:14PM (#45174080)

Also, HN hates machine generated replies, especially the lengthy and overly verbose slop variety -- I think that probably eclipsed any perceived rudeness.

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by tbossanova on Monday September 08, 2025 @09:03PM (#45176176)

I see what you mean, but I actually think there is a place for copy/pasting AI responses. I think of it as a kind of cache, surely a HN comment being served to n users means less resources used and faster access than if all n did their own AI query. But then of course you don’t get exactly your preference e.g. you might prefer a terser response than what is pasted here. Interesting to see how the etiquette around this plays out over time.

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by vasco on Tuesday September 09, 2025 @01:11AM (#45177657)

If you ever wanted to share an AI response, you probably should share your prompt, not the response. But likely you should not share anything, for the reasons already explained. Your argument about saving energy makes zero sense if you have any understanding of orders of magnitude but I won't share what AI says about it.

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by tbossanova on Tuesday September 09, 2025 @09:58PM (#45192166)

Ironically you are being incredibly rude trying to support an argument that posting AI responses is rude. I guess we can conclude you know nothing about anything.

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by vasco on Wednesday September 10, 2025 @01:03AM (#45193500)

I never mention rudeness, I dont give a shit about random people online being "rude". It's just something I don't like, so I shared my opinion.

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by tbossanova on Wednesday September 17, 2025 @11:41PM (#45285071)

Still ironic. Just so you know I might have considered what you said and changed my mind, but being rude made me dismiss you immediately. Just sharing my opinion

[ Parent | on HN ]

Re:NPM debug and chalk packages compromised by EasyMark on Saturday September 20, 2025 @10:50PM (#45319614)

I was, I was also seeing if the hackernews braintrust would freak out at AI much like reddit does, so it was sort of tongue-in-cheek experiment. And freak out they did.

[ Parent | on HN ]