Reuse `TypeScript` types with five utility types

// related

• #0001

  #0001OtherGeekNews2 hours ago

  Firefox 148 Starts Turning Off `asm.js` Optimization

  40radar

  Legacy asm.js still runs, but loses its fast path in Firefox. Old web games and compute-heavy demos should move to WebAssembly; new products can ignore this.

  • —From Firefox 148, SpiderMonkey disables asm.js optimization by default, with removal planned later.
  • —Compatibility remains because asm.js is a JavaScript subset; the breakage risk is performance, not execution.
  • —Existing asm.js assets should be migrated to WebAssembly. For new builds, do not target asm.js.

  Source: news.hada.io/topic?id=29732Read original →
• #0002

  #0002OtherGeekNews6 hours ago

  `TabPFN`, Foundation Model for Tabular Data

  50radar

  TabPFNTabular ML model — fit/predict for classification and regression

  Classification and regression run through a scikit-learn-style fit/predict flow. Useful for quick baselines on small structured datasets before building a full ML pipeline.

  • —TabPFN targets tabular data, not text or images; it fits churn, scoring, lead ranking, and internal ops data.
  • —The fit/predict interface lowers integration cost for Python stacks already using scikit-learn.
  • —TabPFN-2.6 was trained only on synthetic data, so production use still needs validation against real domain data.

  Source: news.hada.io/topic?id=29719Read original →
• #0003

  #0003OtherGeekNews10 hours ago

  Mini Shai-Hulud Returns: 314 `npm` Packages Compromised

  60radar

  A short publish window still pushed hundreds of malicious versions. Lockfiles, token hygiene, and dependency review matter before the next npm install.

  • —The atool npm account was compromised on May 19, 2026, and malicious releases were pushed for about 22 minutes.
  • —Attack automation produced 637 malicious versions across roughly 317 packages. Short-lived incidents still reach CI fast.
  • —The payload was a 498KB obfuscated Bun script, matching scanner structure and regexes tied to Mini Shai-Hulud.
  • —Targets included cloud credentials such as AWS keys. Rotate exposed tokens and audit recent installs from affected packages.

  Source: news.hada.io/topic?id=29709Read original →