developerjhp

Re:Shai-Hulud Returns: Over 300 NPM Packages Infected on Tuesday November 25, 2025 @12:13AM (#46042553)

I’ve been tracking these supply-chain incidents as well, so I built a small real-time scanner that looks for suspicious SHA-1 patterns inside repositories.

It’s basically a lightweight CLI tool you can run directly inside any local project:

    npx sha1-hulud-scanner

Repo is here: https://github.com/developerjhp/sha1-hulud-scanner

It’s not meant to be a full security product — just a simple “first-pass” detector that helps catch unexpected checksum strings or injected artifacts before they slip into CI. Feedback and contributions are welcome!

Show HN: Quick Info on Cursor – Hoverless Tooltips for Keyboard-Only Coding

Posted by developerjhp on Thursday July 17, 2025 @03:26AM
from the show-hn dept.

https://marketplace.visualstudio.com/items?itemName=developerjhp.quick-info-on-cursor

Are you a keyboard-driven developer who hates reaching for the mouse just to see a function signature or variable type? Quick Info on Cursor is a VSCode and Cursor extension that displays hover tooltips automatically when your cursor rests on a symbol — no mouse needed.Just pause your keyboard cursor over a variable or function (default: 500ms), and the tooltip appears as if you hovered it with...

( Read More... | no comments | 2 points | on HN )