5 replies

1. Slab Bulkhead 3 min later

   @zachleat the cheap joke: someone at npm finally got VP level permission to turn off Copilot to make the change.

   1. Zach Leatherman 9 min later

      @slab_bulkhead vibe coding our way to a fix

2. Alex Grant 3 hr later

   @zachleat

   Still cached. Still rocking the exploit.

   #jest download after 6pm eastern still delivering 64k of injected who-knows-what

   1. Zach Leatherman 3 hr later

      @localnerve your local cache might still have it, I suppose!

      1. Alex Grant 4 hr later

         @zachleat

         Oh eek. Thanks 👍