Skip to content

Instantly share code, notes, and snippets.

@franky47
franky47 / loadEnv.ts
Created January 6, 2026 18:47
loadEnv
import { loadEnvFile } from 'node:process'
export function loadEnv() {
const nodeEnv = process.env.NODE_ENV || 'development'
// Load in order of precedence
const files = [
`.env.${nodeEnv}.local`,
nodeEnv === 'test' ? null : `.env.local`,
`.env.${nodeEnv}`,
`.env`,
@hackermondev
hackermondev / writeup.md
Last active February 11, 2026 12:03
How we pwned X (Twitter), Vercel, Cursor, Discord, and hundreds of companies through a supply-chain attack

hi, i'm daniel. i'm a 16-year-old high school senior. in my free time, i hack billion dollar companies and build cool stuff.

about a month ago, a couple of friends and I found serious critical vulnerabilities on Mintlify, an AI documentation platform used by some of the top companies in the world.

i found a critical cross-site scripting vulnerability that, if abused, would let an attacker to inject malicious scripts into the documentation of numerous companies and steal credentials from users with a single link open.

(go read my friends' writeups (after this one))
how to hack discord, vercel, and more with one easy trick (eva)
Redacted by Counsel: A supply chain postmortem (MDL)

Vyper Bytecode Analysed

Bytecode structure

Smart contracts have two bytecodes: creation_bytecode and runtime_bytecode:

  • the creation_bytecode is the one included in the transaction that deploys the contract.
  • the runtime_bytecode is the one stored at the address of the contract, fetchable by calling the eth_getCode RCP method.

:::info This section is referring to Vyper contracts with version >=0.4.1, below you can find a separate section containing differences for older Vyper versions.

// Triggered by: https://fediverse.zachleat.com/@zachleat/115300801628689509
// Interesting inconsistency...
// The reason is probably backward compatibility:
// Truthiness checks are often used to answer the question “Is this value an object?”
class MyBool {
#bool;
constructor(bool) {
this.#bool = bool;
}
@subframe7536
subframe7536 / cc_manager.py
Last active August 30, 2025 18:21
Claude Code Env Manager
#!/usr/bin/env python3
"""
Claude Configuration Manager - Simplified and Optimized
Manages API configurations for Claude with multiple presets support.
"""
import argparse
import json
import os
import sys
@NotWadeGrimridge
NotWadeGrimridge / xpost.py
Last active July 4, 2025 22:26
Tweet from your terminal
#!/usr/bin/env -S uv --quiet run --script
# /// script
# requires-python = ">=3.13"
# dependencies = [
# "beautifulsoup4",
# "curl-cffi",
# "pycryptodome",
# "xclienttransaction",
# ]
# ///
@darkobits
darkobits / start-adapter.ts
Last active January 28, 2026 05:59
WebSocket Adapter for TanStack Start
import { json } from '@tanstack/react-start'
import { getEvent, type ServerRouteMethodsRecord } from '@tanstack/react-start/server'
import createNodeAdapter, { type NodeOptions as NodeAdapterOptions } from 'crossws/adapters/node'
/**
* Adapter for TanStack Start and `crossws`.
*
* @see https://tanstack.com/start/latest/docs/framework/react/server-routes
* @see https://nitro.build/guide/websocket
*
@VictorTaelin
VictorTaelin / spec.md
Created February 26, 2025 15:51
SupTT Spec

The Interaction Calculus

The Interaction Calculus (IC) is term rewriting system inspired by the Lambda Calculus (λC), but with some major differences:

  1. Vars are affine: they can only occur up to one time.
  2. Vars are global: they can occur anywhere in the program.
  3. There is a new core primitive: the superposition.

An IC term is defined by the following grammar:

@colinhacks
colinhacks / keybindings.json
Created August 12, 2024 20:25
`goToDefinition` and `navigateBack`
[
{
"key": "cmd+;",
"command": "editor.action.goToDeclaration"
},
{
"key": "shift+cmd+;",
"command": "workbench.action.navigateBack",
"when": "canNavigateBack"
}
@trvswgnr
trvswgnr / fetchJson.test.ts
Last active July 5, 2025 15:00
nice lil typescript fetch wrapper with errors as values
import { describe, it, expect, spyOn } from "bun:test";
import { fetchJson } from "./fetchJson";
class MockResponse {
static instanceCount = 0;
constructor(
public readonly ok: boolean,
private jsonSuccess: boolean | "bad parse",
) {
MockResponse.instanceCount++;