Hello fellow developer, AI agents get a lot of power these days. They can run CLI commands, call tools and create and delete files for us. In one case, this almost meant that 1M users of one of them would have ended up with a bricked machine. And if that's not enough, NPM "is" was malware caused by phishing and supply chain attacks. On the plus side, check out what creative folk can do in 1k of JavaScript and learn from the amazing Elena how Penpot makes browsers react swiftly to people working together.
