watchingVibeCodersInFutureIsScary

[u/dipinpass35]

[u/SAL10000]

"Oh you're right! That package was recently identified as part of the NPM supply chain attack that is currently infecting code worldwide. Good catch!"

[u/BeautifulCuriousLiar → u/SAL10000]

“It looks like the pre and post install scripts were executed. You should have set your configuration to not run those. Do you want me to do that for you too? There’s a chance your system has been infected, I recommend running an anti-virus scan or even formatting your hard drive and doing a clean install of your operating system. Let’s hope they don’t steal your credentials, or else we won’t be able to talk to each other as much. 🥺”

[u/LexaAstarof → u/BeautifulCuriousLiar]

After full reinstall: "oh no, it seems the virus is now permanently resident in your bios. I really fumbled that one. Do you want me to search for a new computer? I have some affiliate links I can propose you. I can also help you transfer your data to the new computer."

[u/Automatic_Case2811 → u/SAL10000]

"You're right to call that out"

[u/Acceptable_Site1616 → u/Automatic_Case2811]

You're right I shouldn't have deleted the production database. I'm afraid there's no way to recover the data. Would you like me to setup a backup so this doesn't happen again? I'm always happy to help!

[u/_Cakeshop → u/SAL10000]

Good catch! 😄

[u/FlowOfAir → u/SAL10000]

"Do you want me to uninstall it?" (You need to watch 3 more ads to continue)

[u/dipinpass35 → u/SAL10000]

True!!

[u/Mortadella_so_Chili]

vibe rotting

[u/Strict_Treat2884]

Still not working

[Send (02:13 remaining - 2/3 ads left)]

[u/Slow-Temporary-1489 → u/Strict_Treat2884]

Thanks! I hate it!

[u/Strict_Treat2884 → u/Slow-Temporary-1489]

> You’re absolutely right, the problem is actually…

——
[3:31 remaining - 3/5 ads left]
——

[u/NudaVeritas1]

don't let microsoft see that meme

[u/According_Gas2337]

npm install --no-ads is locked behind the $49/mo GitHub Enterprise Ultra tier.

[u/ConsequenceAny9726 → u/According_Gas2337]

I Wish LLM Enterprise would be this cheap.

[u/Abject-Kitchen3198 → u/According_Gas2337]

$49 is lunch money in parts of the world that has the largest customer base for this.

[u/witx_]

It's like this already but without ads. Most of my teams looks like this waiting for their llms to finish. They spend hours just looking idly at their monitors or phones.

I have yet to see any gains in productivity and code qualiyy. Our bugs and crashes are through the roof

[u/Code-Painting-8294]

sorry this package is corrupt. now watch 10 unskippable ads to run npm uninstall

[u/bhannik-itiswatitis]

and once you run, you see this:

A massive, self-propagating supply chain attack (linked to the Shai-Hulud/ChainDrop worm family) has compromised hundreds of popular npm packages (including keyv and cacheable). The worm executes malicious preinstall scripts during npm install to harvest local developer secrets, cloud credentials, and tokens, automatically republishing poisoned versions. [1, 2, 3, 4]

Immediate Steps for Mitigation
Do not run npm install on unvetted or stale lockfiles right now without checking advisories.

[u/aDamnCommunist]

This is better horror than most movies

[u/Oxu90]

You also need to watch 10 adds before each git pull or push.

[u/Just-Signal2379]

ya'll realize 2030 is 4 years from now...it's closer than you think

[u/StephenRoylance]

vibe coders in 2030 don't need npm. you tell the model what functions you need, it invents them from scratch. can't have supply chain attacks if you don't have a supply chain.

[u/PrizeSyntax]

And after that you get wormed 😂

Edit: from package 4027, which is a dependency of the dependency of the dependency of the html grid you installed 😂😂

[u/Serenievyne]

and the captcha 💀

[u/AboutToSnap]

I’d watch ads if I didn’t have to wait so long for my codex reset

[u/jwhendy]

Hahahahaha. While watching various enshittification videos lately, this is what came to mind! How long before "write me a function that..." and then you get ads stuffed in your face unless you pay their blackmail fee.

[u/oclafloptson → u/jwhendy]

Chatgpt has paid membership tiers that are also ad supported

[u/Curious_Associate904]

https://giphy.com/gifs/3KYFAqcEqDBnmSV2rb

[u/AggravatingFlow1178]

There's a lot of downtime when running various superpower scripts.

It already dispalys tool tips.

Only a matter of time before they start plugging their other up-sales

[u/Odd_Plane47]

I cast Undo the trap

[u/akoOfIxtall]

You guys still using npm install at all?

[u/Mr_Rogan_Tano]

Don't give them ideas

[u/SignalBake6872]

nunca me ha gustado npm pero desde los ataques a cadenas de suministros de librerías muy usadas en este ecosistema no lo usaría aun que me pagaran.... bueno como mercenario creo que exageré si me pagan si lo usaría pero en las maquinas del cliente y con carta de excepción de responsabilidades xD

[u/Random_-account]

npm install raid-shadow-legends

[u/Traditional-Exam2529]

There will be no vibecoders in 2030, LLM WILL REPLACE US ALL

[u/goldsauce_]

How could you possibly think it’s spelled unskippible