
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
██╗ ██╗███████╗██╗ ██╗██████╗ ██╗ ██╗████████╗███████╗
██║ ██╔╝██╔════╝╚██╗ ██╔╝██╔══██╗██║ ██║╚══██╔══╝╚══███╔╝
█████╔╝ █████╗ ╚████╔╝ ██████╔╝██║ ██║ ██║ ███╔╝
██╔═██╗ ██╔══╝ ╚██╔╝ ██╔══██╗██║ ██║ ██║ ███╔╝
██║ ██╗███████╗ ██║ ██████╔╝███████╗██║ ██║ ███████╗
╚═╝ ╚═╝╚══════╝ ╚═╝ ╚═════╝ ╚══════╝╚═╝ ╚═╝ ╚══════╝
Stop fumbling for your mouse. Build lightning-fast reflexes for the tools you use every day.
You know the shortcuts exist. You've seen them. You've looked them up. But when you need them... your hand reaches for the mouse.
Sound familiar?
Ctrl+B % in tmux againThe issue isn't knowledge. It's muscle memory.
KeyBlitz is a terminal game that trains your fingers, not just your brain. Using proven spaced repetition algorithms (the same technique that makes Anki and Duolingo work), KeyBlitz:
✨ Builds reflexes - Practice shortcuts until they become automatic
🧠 Adapts to you - Focuses on what you struggle with
🎮 Makes it fun - Combos, streaks, and satisfying progression
📊 Tracks progress - See your mastery grow over time
🚀 Zero install - Run with npx, no setup required
┌─ KeyBlitz: Neovim ─ Group 2/9 ─ Session: 5:23 ─ Combo: 🔥×12 ─┐
│ │
│ ┌──────────────────────┐ │
│ │ DELETE INNER WORD │ │
│ │ ══════════════════ │ │
│ │ d i w │ │
│ │ ▓▓▓ ▓▓▓ ▓▓▓ │ │
│ │ Level: Learning │ │
│ └──────────────────────┘ │
│ │
│ Target: "hello [world] goodbye" │
│ ↑ cursor │
│ │
│ ⏱ 1.5s remaining │
│ │
├──────────────────────────────────────────────────────────────────┤
│ Accuracy: 87% │ Score: 2,340 │ Mastered: 12/45 │ Next: Group 3│
└──────────────────────────────────────────────────────────────────┘
The game shows you a command. You execute the shortcut. Fast = points. Slow = retry.
As you master commands, they fade away - leaving only the concept. Eventually you're executing from pure muscle memory.
Fail too many times? The command resets to basics for more practice.
Get on a streak? Combos and multipliers make it addictive.
# Interactive mode - choose your app
npx keyblitz
# Jump straight into training
npx keyblitz neovim
npx keyblitz hyprland
npx keyblitz vscode
# View your progress
npx keyblitz neovim --stats
# Start fresh
npx keyblitz neovim --reset
That's it. No installation, no config files, no setup. Just run and train.
Want more packs? Check the pack creation guide or request one in the issues!
KeyBlitz uses the SM-2 algorithm (the science behind Anki, SuperMemo, and Duolingo) to determine when you see each command:
Result? You spend time where it matters most - on the shortcuts you're still learning.
🎯 Progressive Unlocking - Master fundamentals before advanced techniques ⏱️ Adaptive Timing - Harder commands get more time 🔥 Combo System - Streaks and multipliers reward consistency 📊 Detailed Stats - Track mastery per command, accuracy, weak spots 🎨 Visual Feedback - Commands fade as you master them 💾 Auto-save Progress - Pick up exactly where you left off 🌈 Beautiful TUI - Colorful, responsive terminal interface 🖥️ Cross-platform - Works on macOS, Linux, Windows 🔌 Zero Dependencies - Just Node.js 16+
Level 0: NEW → Show every 1-3 commands (⏱️ 5.0s timeout)
Level 1: LEARNING → Show every 3-5 commands (⏱️ 3.0s timeout)
Level 2: FAMILIAR → Show every 10-15 commands (⏱️ 2.0s timeout)
Level 3: CONFIDENT → Show every 25-30 commands (⏱️ 1.5s timeout)
Level 4: PROFICIENT → Show every 50-60 commands (⏱️ 1.2s timeout)
Level 5: MASTERED → Show every 100+ commands (⏱️ 1.0s timeout)
Get it right 3 times in a row? Level up. Get it wrong once? Back to basics.
This ensures true mastery, not just memorization.
Want to create your own pack? It's just a JavaScript object:
export default {
id: 'myapp',
name: 'My Application',
description: 'Learn my favorite shortcuts',
groups: [
{
name: 'Core Navigation',
description: 'Essential movement commands',
commands: [
{
keys: 'h',
concept: 'MOVE LEFT',
color: 'cyan',
complexity: 1.0,
targetType: 'line'
},
// ... more commands
]
}
],
targetGenerators: {
line: () => 'Sample text here'
}
}
See the Pack Creation Guide for full details.
Keyboard shortcuts aren't about memorization. They're about reflexes.
You don't "remember" how to type. You don't "recall" how to catch a ball. Your fingers just know.
KeyBlitz treats shortcuts the same way:
After a few sessions, you won't be thinking about shortcuts anymore. You'll just be faster.
Currently in development! Watch this repo for updates.
The namespace is reserved on npm. Full release coming soon with:
Contributions welcome! Whether it's:
Open an issue or submit a PR on GitHub.
MIT © Chad Jones
Ready to stop clicking and start flying? 🚀
npx keyblitz
Your fingers will thank you.
FAQs
Master keyboard shortcuts through muscle memory and spaced repetition
The npm package keyblitz receives a total of 1 weekly downloads. As such, keyblitz popularity was classified as not popular.
We found that keyblitz demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.