.ck-link { text-decoration: underline; } @media only screen { .email * { word-break: break-word; } } @media screen and (max-width: 384px) { .mail-message-content { width: 414px !important; } } @media only screen{body,table,td,a{-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;}} @media only screen{*{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;}} @media only screen and (max-width:600px){.email-container{padding:0 !important;}} @media only screen and (max-width:600px) { .ck-padding-left-none { padding-left:0px !important; } .ck-padding-right-none { padding-right:0px !important; } .ck-padding-left-mobile-friendly { padding-left:18px !important; } .ck-padding-right-mobile-friendly { padding-right:18px !important; } } @media only screen and (max-width:600px) { .ck-mobile-font-size { font-size:50px !important; } } @media only screen and (max-width:600px) { .ck-mobile-font-size { font-size:50px !important; } } @media only screen and (max-width:600px) { .ck-mobile-font-size { font-size:50px !important; } } @media only screen and (max-width:600px) { .ck-layout-block.ck-layout-stack td { display:block !important;width:100% !important;padding:0 !important; } .ck-column.ck-column-stack { margin-bottom:32px !important; } .ck-padding-3-top-mobile-friendly { padding-top:12px !important; } .ck-padding-3-right-mobile-friendly { padding-right:12px !important; } .ck-padding-3-bottom-mobile-friendly { padding-bottom:12px !important; } .ck-padding-3-left-mobile-friendly { padding-left:12px !important; } } @media only screen and (max-width:600px) { .ck-mobile-font-size { font-size:50px !important; } } p:hover{background:transparent} h2::first-letter{border-bottom:1px solid black} h2 a::first-letter{border-bottom:1px solid black} h2:has(+h3) a::first-letter{border-bottom:1px solid black} ul.unordered_list li::marker{content:’→‘;font-size:27px;font-weight:900}
A Tasty Treats NEWSLETTER for Web Developers
Issue #53:
- HTML tips so good you’ll wonder why no one told you sooner
- jQuery refuses to die — and it might outlive us all
- Color-shifting CSS tricks to make your UI look like it’s in a Marvel movie
- Hot take: What’s harder - front-end or back-end?
- Did you see we dropped the first batch of limited-edition web dev pin packs???
🚨🗞️ BREAKING NEWS
The maintainer of 18 widely used npm packages (over 2 BILLION downloads per week in total) including debug, chalk and color - got hacked and his credentials were used to publish malicious versions of these packages.
You might not use these dependencies directly BUT your dependencies might use these, so you should check if you have any of the listed versions installed (see below for scripts).
For a detailed timeline of what happened and an analysis of the malware see this post by Aikido.
TLDR: maintainer got phished, attackers published crypto stealing malware with his credentials, npm removed the packages after 1 hour, compromised packages still got downloaded millions of times within that hour, the included malware was just crypto stealing that only worked in the browser 🤦♂️ (no machine persistence, RCE or other credentials stolen).
To check if you’ve been impacted:
- Check your local node_modules to see if it contains the malware:
grep -R 'checkethereumw' - Check your npm cache with this script by phxgg
- Check your project with this script by AndrewMohawk
Thanks to this post by Security Alliance for the remediation links.
Stay safe out there - don’t click links in emails, pin your package versions, eat your veggies.
- CJ
HTML tips you won’t find in most tutorials
FROM CJ
Sick tips for all you HTML programmers out there.
jQuery - The Library That Won’t Die
CJ’S LINK
Why jQuery is still relevant in 2025
Color Shifting in CSS
HAND selected by cj
An exploration of color animation techniques with CSS.
just for fun:
slideventura.com - Ace Ventura sliding door simulator
fun PROVIDED by cj
Slide your mouse to re-live a classic movie scene.
.ck-link { text-decoration: underline; } @media only screen { .email * { word-break: break-word; } } @media screen and (max-width: 384px) { .mail-message-content { width: 414px !important; } } @media only screen{body,table,td,a{-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;}} @media only screen{*{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;}} @media only screen and (max-width:600px){.email-container{padding:0 !important;}} @media only screen and (max-width:600px) { .ck-padding-left-none { padding-left:0px !important; } .ck-padding-right-none { padding-right:0px !important; } .ck-padding-left-mobile-friendly { padding-left:18px !important; } .ck-padding-right-mobile-friendly { padding-right:18px !important; } } @media only screen and (max-width:600px) { .ck-mobile-font-size { font-size:50px !important; } } @media only screen and (max-width:600px) { .ck-mobile-font-size { font-size:50px !important; } } @media only screen and (max-width:600px) { .ck-mobile-font-size { font-size:50px !important; } } @media only screen and (max-width:600px) { .ck-layout-block.ck-layout-stack td { display:block !important;width:100% !important;padding:0 !important; } .ck-column.ck-column-stack { margin-bottom:32px !important; } .ck-padding-3-top-mobile-friendly { padding-top:12px !important; } .ck-padding-3-right-mobile-friendly { padding-right:12px !important; } .ck-padding-3-bottom-mobile-friendly { padding-bottom:12px !important; } .ck-padding-3-left-mobile-friendly { padding-left:12px !important; } } @media only screen and (max-width:600px) { .ck-mobile-font-size { font-size:50px !important; } } p:hover{background:transparent} h2::first-letter{border-bottom:1px solid black} h2 a::first-letter{border-bottom:1px solid black} h2:has(+h3) a::first-letter{border-bottom:1px solid black} ul.unordered_list li::marker{content:’→‘;font-size:27px;font-weight:900}
A Tasty Treats NEWSLETTER for Web Developers
Issue #53:
- HTML tips so good you’ll wonder why no one told you sooner
- jQuery refuses to die — and it might outlive us all
- Color-shifting CSS tricks to make your UI look like it’s in a Marvel movie
- Hot take: What’s harder - front-end or back-end?
- Did you see we dropped the first batch of limited-edition web dev pin packs???
🚨🗞️ BREAKING NEWS
The maintainer of 18 widely used npm packages (over 2 BILLION downloads per week in total) including debug, chalk and color - got hacked and his credentials were used to publish malicious versions of these packages.
You might not use these dependencies directly BUT your dependencies might use these, so you should check if you have any of the listed versions installed (see below for scripts).
For a detailed timeline of what happened and an analysis of the malware see this post by Aikido.
TLDR: maintainer got phished, attackers published crypto stealing malware with his credentials, npm removed the packages after 1 hour, compromised packages still got downloaded millions of times within that hour, the included malware was just crypto stealing that only worked in the browser 🤦♂️ (no machine persistence, RCE or other credentials stolen).
To check if you’ve been impacted:
- Check your local node_modules to see if it contains the malware:
grep -R 'checkethereumw' - Check your npm cache with this script by phxgg
- Check your project with this script by AndrewMohawk
Thanks to this post by Security Alliance for the remediation links.
Stay safe out there - don’t click links in emails, pin your package versions, eat your veggies.
- CJ
HTML tips you won’t find in most tutorials
FROM CJ
Sick tips for all you HTML programmers out there.
jQuery - The Library That Won’t Die
CJ’S LINK
Why jQuery is still relevant in 2025
Color Shifting in CSS
HAND selected by cj
An exploration of color animation techniques with CSS.
just for fun:
slideventura.com - Ace Ventura sliding door simulator
fun PROVIDED by cj
Slide your mouse to re-live a classic movie scene.
发布者